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Wednesday - May 29, 2019 


10:34 a.m. 


PROCEEDINGS 


-oOo- 


(Call to Order of the Court. 


THE CLERK: Calling Case Number 18-MD-2843, In Re 
Facebook Inc. Consumer Privacy User Profile Litigation. 

Can one member from the plaintiff and from the defendant 
please step forward and state the appearances of your parties. 

MR. LOESER: Good morning. Your Honor. Derek Loeser 
from Keller Rohrback for the plaintiffs. If it's okay with 
the Court, I'll allow my colleagues to introduce themselves. 

THE COURT : Sure. 

MS. WEAVER: Good morning. Your Honor. Lesley Weaver, 
Bleichmar Font! & Auld. 

THE COURT: Good morning. 

MS. LAUFENBERG: Good morning. Your Honor. Cari 
Laufenberg, Keller Rohrback. 

THE COURT: Good morning. 

MS. DAVIS: Anne Davis, Bleichmar Fonti & Auld. 

THE COURT: Good morning. 

MR. GOULD: Benjamin Gould, Keller Rohrback. 

THE COURT: Good morning. 

MR. SAMRA: Good morning. Your Honor. Josh Samra, 
Bleichmar Fonti & Auld. 


THE COURT: Good morning. 
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1 

MR. WEILER: Good morning. Your Honor. Matthew 

2 

Weiler, Bleichmar Fonti & Auld, for plaintiffs. 

3 

THE COURT: Good morning. 

4 

MR. SNYDER: Good morning. Your Honor. Grin Snyder, 

5 

Gibson Dunn, for Facebook; and I'm joined by my colleagues Josh 

6 

Lipshutz, Kristin Linsley, and Christopher Leach. 

7 

THE COURT: Hi, everyone. 

8 

MR. SNYDER: Hi, Judge. 

9 

THE COURT: Okay. Why don't I start with Facebook, 

10 

and why don't we start with the last question that I posed to 

11 

you, which is, let's assume -- I know you strongly disagree 

12 

with this; but let's assume, for the sake of argument, that 

13 

Facebook suggested to its users that if your settings are to 

14 

share stuff with friends only, only your hundred friends -- 

15 

let's say a user has 100 friends -- and you adjust your 

16 

settings so that your posts and your likes and whatnot, your 

17 

photographs are shared only with your friends, we, Facebook, 

18 

will make sure not to give anyone else access to that 

19 

information. Okay? And let's say that in contravention of 

20 

that assurance, Facebook actually disseminated the photographs 

21 

and the likes and the posts to hundreds of companies. 

22 

Wouldn't that be a really serious privacy violation? 

23 

MR. SNYDER: The answer. Your Honor, is no, and I'll 

24 

explain why. 

25 

The answer to your full question is both. We do really 
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contend that this is not serious enough to give rise to a claim 
of invasion of privacy or any other privacy -- 

THE COURT: You also say that that's not what 
happened. I understand that. 

MR. SNYDER: And SO let me explain why. Addressing 
your hundred friends -- 

THE COURT: Yes. 

MR. SNYDER: -- example -- and this really goes to the 
core of Facebook's argument, both on standing, which I 
understand we're going to put a pin in and hopefully you'll 
give me a moment but maybe not, and to consent -- and to the 
consent questions. 

Your Honor, first, the gravamen, obviously, of any privacy 
tort, including any invasion of privacy tort, is a reasonable 
expectation of privacy, whether it's seclusion upon intrusion, 
whether it's public disclosure of private facts, or any 
constitutional privacy right that may exist under California 
law. 

And what's key here. Your Honor, is that the plaintiffs 
admit, throughout their lengthy Complaint, that they shared 
their Facebook information with, in this case, a hundred 
friends, friends of friends, or even strangers. 

THE COURT: Okay. But let's talk about my example. 

MR. SNYDER: Okay. Your analysis. Let's just keep 

it - - 
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THE COURT : Okay. 

MR. SNYDER: --to friends. 

Plaintiffs admit they were told that they could control 
their sharing to not control [sic] with friends. That's part 
of your hypothetical. Plaintiffs admit they were told by 
Facebook that Facebook cannot -- 

THE COURT: Wait. Start over. Okay? Put your 
talking points away, maybe, and listen to my question. Okay? 

My question is, assume -- forget about what the plaintiffs 
are alleging right now. Okay? We're talking about a 
hypothetical. Okay? 

The hypothetical is, a Facebook user sets her settings so 
that only her friends can see her photographs. 

MR. SNYDER: Yes. 

THE COURT: Okay? And Facebook assures the user that 
if you only share stuff with your friends, we, Facebook, will 
not give access to those photographs to anyone else. 

MR. SNYDER: Yes. 

THE COURT: And assume, despite that assurance that 
Facebook gives the user, that Facebook actually disseminates 
those photographs to hundreds of companies. 

MR. SNYDER: And there are no other disclosures under 
this hypothetical? 

THE COURT: Correct. 

MR. SNYDER : Okay. 
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THE COURT: Okay? 

MR. SNYDER: Same answer. 

THE COURT: Now, SO is that a serious privacy invasion 
by Facebook? 

MR. SNYDER: No. There is no privacy interest, 
because by sharing with a hundred friends on a social media 
platform, which is an affirmative social act to publish, to 
disclose, to share ostensibly private information with a 
hundred people, you have just, under centuries of common law, 
under the judgment of Congress, under the SCA, negated any 
reasonable expectation of privacy. 

THE COURT: But, SO how is that different from -- 
okay. Let's say -- I mean, I sort of vaguely remember when I 
was a kid, my dad would invite a bunch of people over and he 
would show a slideshow of our family vacation to Europe. 

Right? And he might invite 20 friends and show them the 
photographs. 

I mean, if somebody gets ahold of that information and 
disseminates it to a thousand companies -- 

MR. SNYDER: Yes. 

THE COURT: -- isn't that -- I mean, the fact that he 
showed those slides to 20 people doesn't prevent him from 
asserting a privacy interest -- 

MR. SNYDER: It does -- 

THE COURT: -- in those slides. 
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PROCEEDINGS 

MR. SNYDER: -- Your Honor. 

And if you let me explain, as a matter of law, it clearly 
does. The gravamen of any privacy tort is a reasonable 
expectation of privacy, and whether it's the Restatement, 
whether it's California common law, whether it is old 
British -- English common law. 

I'll read -- I'll read what the Restatement 652D 
says (reading): 

There's no tort liability when a defendant merely 
gives further publicity to information that the 
plaintiff has already publicized. 

It is -- 

THE COURT: But "publicized," that's an important 

word - - 

MR. SNYDER: Yes. 

THE COURT: -- right? 

MR. SNYDER: Yes, it is. But let me explain. 

100 people. The social act of broadcasting your private 
information to 100 people negates, as a matter of law, any 
reasonable expectation of privacy. The very premise of 
Facebook -- 

THE COURT: You seem to be treating it as a binary 


25 


thing, like either you have a full expectation of privacy or 
you have no expectation of privacy at all. And I don't 
understand why we should think of it in that way. 
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I mean, if I don't tell anybody something, if I don't 
share a certain thing with anybody, I have a full expectation 
of privacy in that. If I share it with ten people, that 
doesn't eliminate my expectation of privacy. It might diminish 
it, but it doesn't eliminate it. 

And if I share something with ten people on the 
understanding that the entity that is helping me share it will 
not further disseminate it to a thousand companies, I don't 
understand why I don't have -- why that's not a violation of my 
expectation of privacy. 

MR. SNYDER: Because, Your Honor, what the plaintiffs 
are doing here and what Your Honor's hypothetical suggests is a 
brand-new right of privacy that has never been recognized 
before. 

And if you'll let me be heard. Your Honor, the plaintiffs 
say in their brief, and Your Honor is suggesting, that, quote, 
the disclosure of private information, bracket, to 100 people, 
closed bracket, is itself a brand-new privacy right. 

That's just not right. Your Honor. There is no privacy 
right when the act is the negation of any expectation of 
privacy. I believe. Your Honor, it is not a close call. 

Let me give you a hypothetical of my own. I go into a 
classroom and invite a hundred friends. 

This courtroom. I invite a hundred friends, I rent out 
the courtroom, and I have a party. And I disclose -- 
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1 

THE COURT: These people are not all your friends. 

2 

MR. SNYDER : No. 

3 

And I disclose something private about myself to a hundred 

4 

people, friends and colleagues. 

5 

Those friends then rent out a 100,000-person arena, and 

6 

they rebroadcast those to 100,000 people. 

7 

I have no cause of action because by going to a hundred 

8 

people and saying my private truths, I have negated any 

9 

reasonable expectation of privacy, because the case law is 

10 

clear. And I can cite -- 

11 

THE COURT: If you disclose -- let me -- I agree with 

12 

you that if you turned around right now in open court, on the 

13 

record, and disclosed something about yourself, you would not 

14 

have an expectation of privacy in that. 

15 

But what if you shared with your partners in your 

16 

New York -- you're in the New York office? 

17 

MR. SNYDER: Yes, Your Honor. 

18 

THE COURT: What if you shared with your partners in 

19 

your New York office some medical condition that you had? 

20 

MR. SNYDER: Absent any fiduciary or other legal duty. 

21 

I would be out of luck. And let me tell you. Your Honor -- 

22 

THE COURT: Wait a minute. So you say -- the 

23 

partnership has an agreement. Okay? "You can share stuff with 

24 

us and it won't be disclosed." 

25 

And so you share with a hundred people -- your hundred 
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partners in your New York office a serious medical condition 
that you have that's going to put you out of commission for a 
while, and then the Gibson Dunn office does a press release 
about it. Your privacy has not -- your privacy rights have not 
been invaded? 

MR. SNYDER: It has not. Your Honor. And I know 
Your Honor is looking at me skeptically, but all you need to do 
is go to the common law. And I'll march through some cases, if 
Your Honor wishes. 

But you have to, as a matter of law -- the Restatement, 
the annotations to the Restatement, the cases going back 
literally centuries, hold that you have to closely guard 
something in order to have a reasonable expectation of privacy. 
It's commonsensical. 

This is why every parent says to their child, "Do not post 
it on Facebook if you don't want to read about it tomorrow 
morning in the school newspaper," or, as I tell my young 
associates if I were going to be giving them an orientation, 

"Do not put anything on social media that you don't want to 
read in the Law Journal in the morning." 

There is no expectation of privacy when you go on a social 
media platform, the purpose of which, when you are set to 
friends, is to share and communicate things with a large group 
of people, a hundred people. And, of course, I want -- 

THE COURT: But there are different levels of risk you 
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take; right? I mean, you may -- when you disseminate 
information to your 20 friends or your 50 friends or your 
hundred friends, you're certainly taking a risk that other 
people will learn about that information. Just like when you 
tell a secret to your best friend, you're running the risk that 

your best friend is going to tell his wife about that, and his 

wife is going to tell her friend, and a larger circle of people 

will learn about it. But what you're not risking, a risk that 

you're not necessarily taking on is that the entity that's 
helping you disseminate that information to your friends will 
then turn around and disseminate it to a thousand different 
corporations. 

MR. SNYDER: Your Honor, the hypothetical you gave -- 
which, of course, bears no resemblance to the facts of this 
case at all because of the disclosures that negated any 
reasonable expectation of privacy because users were told -- 
this is an asterisk to your hypothetical -- "We can't control 
what third parties do with your information. Your friends are 
going to share things with other people, including app 
developers, including others." 

So put the disclosures aside. The disclosures are the 
icing on the cake in negating and vitiating any reasonable 
expectation of privacy. But even without disclosures, in your 
hypothetical, and certainly without consent as an issue, as a 
matter of black letter common law, the user no longer has any 
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1 

expectation of privacy over information after she shares it 

2 

with a hundred people. 

3 

Now, the reason is. Your Honor, because they shared the 

4 

information -- this is what the case law, if you stretch it 

5 

out, teaches -- you've lost control over the information and 

6 

its subsequent disclosure, which is why, if you look at the 

7 

congressional judgment behind the SCA, for example, it 

8 

expressly authorizes the recipient of information with consent 

9 

to share it with the world. And it's commonsensical. 

10 

So the case law -- 

11 

THE COURT: Well, it doesn't expressly authorize the 

12 

recipient of the information to share it with the world. It 

13 

just says that if the recipient of the information shares it. 

14 

it's not a violation of the SCA. 

15 

MR. SNYDER: Okay. Fair enough. 

16 

But my point. Your Honor, is that the SCA and the 

17 

congressional judgment underlying it, reflects the 

18 

commonsensical common law principle that if you don't hold 

19 

something private, it's not private. And if you don't hold 

20 

something private and publicize it to a hundred people, as a 

21 

matter of law, you have no reasonable expectation of privacy. 

22 

In your hypothetical, do you have a breach of contract 

23 

action against Facebook? 

24 

THE COURT: Oh, I would think so, yeah. 

25 

MR. SNYDER: Perhaps so under your hypothetical. But 
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1 let me give Your Honor a couple of cases. 

2 THE COURT: Well, no. Let me ask you first. I think, 

3 for the most part -- the Complaint is riddled with these 

4 statements by Facebook executives with, sort of, grandiose 

5 statements about privacy and "Your privacy is important to us" 

6 and all that kind of stuff. I think, for the most part, those 

7 statements aren't terribly relevant. I mean, they may be a 

8 little bit relevant. They may be a little bit relevant to how 

9 the user understands the disclosure language. And we can get 

10 to that in a bit. But for the most part, I think that stuff is 

11 a little bit of a sideshow, except with respect to this 

12 question. 

13 I mean, what you are saying now seems contrary to the 

14 message that Facebook itself disseminates about privacy. 

15 MR. SNYDER: I would -- 

16 THE COURT: I mean, would Facebook -- I mean, if we 

17 were asking the CEO or whoever about -- if they were standing 

18 here instead of you, would they be saying the same thing? 

19 That if Facebook promises not to disseminate anything that 

20 you send to your hundred friends and Facebook breaks that 

21 promise and disseminates your photographs to a thousand 

22 corporations, that that would not be a serious privacy 

23 invasion? 

24 MR. SNYDER: First of all, I can't speak for the CEO, 

25 but I can speak for Facebook. 
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1 

THE COURT : Okay. 

2 

MR. SNYDER: And what I can say to Your Honor is. 

3 

first of all, I don't think any of the statements were 

4 

grandiose. I think they're fully consistent with the robust 

5 

and layered disclosures that Facebook makes to these users. 

6 

THE COURT: Facebook doesn't think that that is a 

7 

serious privacy issue? 

8 

MR. SNYDER: Your hypothetical? 

9 

THE COURT: Yeah. 

10 

MR. SNYDER: I think it may be -- there's a difference 

11 

between Facebook's statement, as the CEO has said repeatedly. 

12 

about its commitment to privacy and what it wants to do above 

13 

and beyond the law to respect privacy issues. 

14 

THE COURT: But my hypothetical is not -- 

15 

MR. SNYDER: But it's not -- 

16 

THE COURT: Facebook does not consider that to be a 

17 

serious privacy breach? 

18 

MR. SNYDER: Facebook does not consider that to be 

19 

actionable, as a matter of law under California law, because 

20 

the very act of sharing with a hundred friends vitiates, as a 

21 

matter of basic common law, any expectation of privacy. 

22 

Let me point Your Honor just to random cases that we found 

23 

in response to Your Honor's order last night. 

24 

There's a Georgia case. Supreme Court case. 

25 

C-o-t-t-r-e-I-I versus Smith, 299 Georgia 517, where an 
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1 

extramarital affair was already exposed on blogs and to 

2 

Facebook friends, so it wasn't a private fact. No tort; no 

3 

privacy interest. 

4 

There are other cases involving -- 

5 

THE COURT: Was it friends only? Because you just 

6 

said "blogs." 

7 

MR. SNYDER: Facebook friends. 

8 

THE COURT: Yeah, but you just said "blogs." 

9 

MR. SNYDER: And -- 

10 

THE COURT: So if it's out on the blogs -- 

11 

MR. SNYDER: And Facebook. 

12 

THE COURT: -- for everybody to see, then that's a 

13 

different story. 

14 

MR. SNYDER: And Facebook. 

15 

THE COURT: Right. But the whole point, I mean. 

16 

Facebook's whole point, I thought, in sort of communicating to 

17 

consumers how important privacy is, is that if you share stuff 

18 

only with your friends, that doesn't mean you're sharing it 

19 

with the world. 

20 

MR. SNYDER: No, Your Honor, Facebook never says that. 

21 

Facebook says when you -- are we in your hypothetical, or are 

22 

we in the real world? Because I'd like to go to the real 

23 

world. 

24 

THE COURT: Okay. Let's go to the real world. 

25 

MR. SNYDER: In the real world, in the real world, not 
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1 

only is it common sense and a matter of basic common law that 

2 

when you share private information with a hundred people. 

3 

you've lost any control over that information and its privacy; 

4 

but the belt and suspenders on this case that negates any 

5 

privacy interest as a matter of basic common sense, again, are 

6 

the disclosures, because the disclosures here -- I made a board 

7 

that is -- just sort of strips it down to its basics. 

8 

THE COURT: Great. And let me just pull up the actual 

9 

document, because when -- this usually happens in patent cases 

10 

where the lawyers pull out portions of a disclosure, and then I 

11 

go to the full document -- so I always like to have the full 

12 

document up when -- 

13 

MR. SNYDER: That'S fine. Your Honor. 

14 

THE COURT: -- a lawyer is showing me a poster board. 

15 

MR. SNYDER: My last board had the full document, and 

16 

for the Court's convenience, I condensed it. So -- 

17 

THE COURT: That'S perfectly fine. 

18 

MR. LOESER: Your Honor, this is very apropos where we 

19 

can't actually see. 

20 

THE COURT: Well, you're free to move around and go 

21 

wherever you want. 

22 

MR. LOESER: Some judges get very angry when you 

23 

walk -- 

24 

THE COURT: No, no, no. Knock yourself out. 

25 

But let me just pull up the -- so this is Exhibit 45? 
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1 

So this is Exhibit 45. This is the December llth, 2012, 

2 

Data Use Policy. 

3 

MR. SNYDER: Yes. And SO this also -- 

4 

THE COURT: And what page of that filing should I go 

5 

to? 

6 

MR. SNYDER: Let me make the broader point. 

7 

Your Honor, as my colleagues are looking for the page number. 

8 

So the broader point is that not only is it a matter of 

9 

common sense and common law that when you disclose your private 

10 

information to a hundred people, you have no privacy interest 

11 

in that information, but here, the disclosures to Facebook were 

12 

multiple and they said two things. 

13 

One, when you share information with friends, friends 

14 

could share it with third parties, including apps. That's what 

15 

happened here. 

16 

THE COURT: This is on page 10 of 16, right -- 

17 

MR. SNYDER: Yes. 

18 

THE COURT: -- of the disclosure? 

19 

MR. SNYDER: Yes. 

20 

"... information you share on Facebook can be 

21 

reshared. This means that if you share something on 

22 

Facebook, anyone" -- that goes to your question about 

23 

scale -- "anyone who can see it" -- 

24 

THE COURT: So one of the phrases that you took out -- 

25 

that's not the beginning of the sentence. "Information you 
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share on Facebook can be reshared." 

The beginning of the sentence is: 

"Just like when you share information by e-mail 
or elsewhere on the web, information you share on 
Facebook can be reshared." 

Right? 

MR. SNYDER: It proves my point double, yes. I'm just 
trying to give the salient sentence, which says anyone can see 
it -- anyone who can see it, your hundred friends -- 

THE COURT: But when you share -- when you send an 
e-mail, when you share information by e-mail, you don't 
necessarily expect that the company that operates the e-mail 
system will take that information and disseminate it to a 
thousand other companies. 

MR. SNYDER: The question is: Do you have an 
expectation of privacy in the information? 

And in your hypothetical, when you send it to a hundred 
people, anyone who can see it -- the hundred people -- can 
share it with others, meaning, potentially, tens of thousands 
or more, including the games, applications, and websites they 
use. And that's this case, of course. And -- 

THE COURT: No, that's not this case because they 
haven't sued because their friends are resharing information. 

MR. SNYDER: Well, it's the case that their 
information was shared with friends who shared it with Kogan; 
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1 and then Kogan, in violation of our policies, gave it to 

2 Cambridge Analytica and served back ads to the users. 

3 Facebook, on a board I'm about to show you, made clear, 

4 as, again, is common sense, that once the sped arrow is 

5 launched, once your private information is shared with a 

6 hundred people, Facebook can't control what a third-party app 

7 or game might do with that information. And that, again, is 

8 common sense. And so -- 

9 THE COURT: But here's the thing. I know that we 

10 can't just focus on this language, and you have other language 

11 that is maybe a little more helpful to you. 

12 But if we do look at this language in isolation, I would 

13 say that it's a little bit misleading, because what it -- the 

14 image that it invokes -- right? -- is, you post a message and 

15 you share that message with your friend or you send an e-mail 

16 to a friend or you make photographs available to a friend, and 

17 then your friend may turn around and forward it to somebody 

18 else. Right? But it doesn't really invoke the image of your 

19 friend playing FarmVille through Facebook and the act of your 

20 friend playing FarmVille through Facebook giving Zynga -- is 

21 that the name of the company? 

22 MS. WEAVER: Yes. 

23 THE COURT: -- giving Zynga access to all of your 

24 Facebook information that your friend could potentially see. 

25 This paragraph that you've put up does not invoke that 
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image. It invokes a much more benign image of your information 
being passed along. 

MR. SNYDER: Well, it depends on what you're talking 
about, if you're talking about apps, if you're talking about -- 
THE COURT: I'm talking about apps now. 

MR. SNYDER: Apps. So I respectfully disagree, but I 
believe that this provides ample notice -- 
THE COURT: Okay. But -- 
MR. SNYDER: -- to users -- 
THE COURT: -- on a 12(b)(6) motion? 


MR. SNYDER: Yes. 


THE COURT: As a matter of law? I mean, that's 


another -- 


MR. SNYDER: Yes. 

THE COURT: -- issue I'm struggling with. 

You're saying that the only conclusion that a reasonable 
Facebook user could draw from this paragraph that you've called 
out now is that the user is going to understand that when their 
friend is playing FarmVille through Facebook, Zynga is going to 
be able to go in and grab all the information that is available 
to your friend from your Facebook account. 

MR. SNYDER: Your Honor, it's not just this language. 
It is the multiplicity of disclosures, the layered disclosures, 
that plaintiffs paste throughout their Complaint that we cite 
to in our moving brief and reply brief. 
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THE COURT: I mean, so far, arguably, I mean, this is 
a little bit of a head fake. I mean, I'm not saying it was 
intentional, but you could -- it seems to me that you could 
view this paragraph as a little bit of a head fake. 

MR. SNYDER: Well, if you look at "Controlling what is 
shared when the people you share with use applications," which 
is on Document 187-45, page 10 of 16, that disclosure says: 

"Just like when you share information by e-mail 
or elsewhere . . . ," dot-dot-dot. 

Then it says: 

"Your friends and other people you share 
information with often want to share your information 
with applications to make their experiences on those 
applications more personalized and social. For 
example, one of your friends might want to use a music 
application that allows them to see what their friends 
are listening to. To get the full benefit of that 
application, your friend would want to give the 
application her friend list -- which includes your 
User ID -- so the application knows which of her 
friends is also using it. Your friend might also want 
to share the music you," the user, "'like' on 
Facebook. If you have made that information public, 
then the application can access it just like anyone 
else. But if you've shared your likes with just your 
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1 

friends, the application could ask your friend for 

2 

permission to share them." 

3 

THE COURT: Okay. So that's a good counterpoint to 

4 

what I said, but -- so that's sort of the Spotify example; 

5 

right? 

6 

MR. SNYDER: Yes. 

7 

THE COURT: And then, if you go down to the last 

8 

sentence in that section of the disclosures, it says: 

9 

"If an application asks permission from someone 

10 

else to access your information, the application will 

11 

be allowed to use that information only in connection 

12 

with the person that gave the permission and no one 

13 

else." 

14 

So it seems to me one way to interpret that is: 

15 

All right. So we're talking about Spotify now. So your friend 

16 

goes on Spotify, and Spotify wants to point out to your friend 

17 

what their friends are listening to. So Spotify might want to 

18 

tell your friend what you are listening to or what music you 

19 

like, what music you've said that you liked on Facebook, or 

20 

something like that. Right? 

21 

MR. SNYDER: Correct. 

22 

THE COURT: So in connection with that interaction 

23 

between Spotify and your friend, Spotify may have access to 

24 

your information and may point that out -- may point that 

25 

information out to your friend. 




1 

2 

3 

4 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 

23 

24 


PROCEEDINGS 

But it doesn't follow, it seems to me, automatically, that 
this means that Spotify will also have access to your 
information outside the context of its interactions with your 
friends. And so that gets to the question that I asked you. I 
can't remember what -- 

MR. SNYDER: Question 5, Your Honor. 

THE COURT: -- number it was. 

Yeah, Question 5. 

MR. SNYDER: So the answer to Question 5 -- and I 
appreciate the questions because we can answer them directly, 
"yes" or "no" or "maybe." 

And in this case, the answer is, the words "only be 
allowed" do not describe, as a matter of law, on a 12(b)(6) 
motion, a technological limitation on what Spotify -- 

THE COURT: I don't think it -- I don't think, as a 
matter of law, that we have to interpret it that way. 

MR. SNYDER: What I'm saying -- 

THE COURT: In other words, the plaintiffs aren't 
moving for judgment -- 

MR. SNYDER: I'm sorry. 

THE COURT: -- on the pleadings -- 

MR. SNYDER: I misspoke. 

THE COURT: -- here. 

MR. SNYDER: No reasonable reading of this 


25 


paragraph -- 
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1 

THE COURT: Why not? 

2 

MR. SNYDER: -- supports the notion -- 

3 

THE COURT: Why? 

4 

MR. SNYDER: -- that "only be allowed" describes a 

5 

technological limitation. 

6 

THE COURT: Why not? 

7 

MR. SNYDER: Well, I'll tell you. The plain and 

8 

ordinary definition of "allowed," the word "allowed," is like 

9 

"may" and "can." 

10 

"Allowed" is not "Is it physically feasible?" but what is 

11 

permissible, acceptable, sanctioned. If you look at the Oxford 

12 

English dictionary, "allowed" is -- 

13 

THE COURT: No, I understand that. But I'm saying 

14 

there's another sort of colloquial use of "allowed." Let me 

15 

give you an example. Okay? 

16 

March Madness brackets. Okay? I don't know if your 

17 

office does this, but many offices say to employees, "Look, you 

18 

cannot use your work computer to fill out your March Madness 

19 

brackets," for whatever reason, because we're uptight or 

20 

because it creates a server problem or something like that. 

21 

MR. SNYDER: You can't use your office computer to go 

22 

on Facebook. You're not allowed to. 

23 

THE COURT: Oh, another example. 

24 

MR. SNYDER: We don't like that rule, but it exists 

25 

somewhere. 
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1 

THE COURT: So there are two -- so you're not allowed 

2 

to do that. There are two possible ways that could be 

3 

implemented. 

4 

One is, we're going to trust you not to do it. And if we 

5 

catch you doing it, you're going to be in trouble. 

6 

The other way is to just block the website. 

7 

And so I might be on my computer and I may want to go to 

8 

my March Madness brackets, and up pops a message: You are not 

9 

allowed to go to this website. 

10 

And so that's a technological barrier to my being able to 

11 

access that information. And I don't understand why it's not 

12 

at least plausible that a user could interpret that language 

13 

that way. 

14 

MR. SNYDER: I'll explain why it's not reasonable nor 

15 

plausible. Not only is it the plain, ordinary -- 

16 

THE COURT: The question isn't: What's more 

17 

plausible? 

18 

MR. SNYDER: No, Your Honor. What I'm saying is, it 

19 

is an unreasonable, implausible reading, as a matter of law, to 

20 

read it the way Your Honor suggested. 

21 

THE COURT: Why? 

22 

MR. SNYDER: I'm about to explain. 

23 

First is, when you look to the canons of construction. 

24 

which is what we need to do in discerning the plain language. 

25 

if it is plain, is first you look to the dictionary definition. 
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And there's no question that every dictionary definition, 
whether it's Merriam-Webster, Oxford English, does not make the 
colloquial point Your Honor is making -- let me start with 
that -- but makes clear that the word "allow" means -- 

THE COURT: Well, but do you disagree -- 

MR. SNYDER: -- permission. 

THE COURT: -- that people use the word "allow" that 

way? 

MR. SNYDER: But the second canon of construction 
which is applicable here and dispositive in support of what I'm 
saying is that when Facebook -- the canon of construction is 
that in trying to discern words of a contract, you don't just 
look at the word at issue, but you look at the word in the 
context of the integrated agreement. 

The integrated agreement makes clear that when Facebook 
wanted in its disclosures to refer to technical limitations, it 
did not use what you say is a colloquial "allow." 

THE COURT: Okay. Show me that. 

MR. SNYDER: It used words that are descriptive and 
accurate to technological restraint or disability. 

So the Data Use Policy -- 

THE COURT: Same document? 

MR. SNYDER: -- November 15th, 2013, page 10 -- 

THE COURT: Okay. Hold on. Let me get there. 

All right. Go ahead. 






1 

2 

3 

4 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 

23 

24 


MR. SNYDER: "Once you remove an app, it won't be 
able to" -- 


THE COURT: Wait. Hold on. Let me find the language 
that you're reading. Can you tell me where on -- 
MR. SNYDER: Yeah. Page 10. 

THE COURT: -- where on the page you are? 

MR. SNYDER: Yeah. It is -- 

THE COURT: Oh, I found it. 

MR. SNYDER: -- the third paragraph. 

THE COURT: I found it. 

MR. SNYDER: -- "it won't be able to continue to 

update the additional information you've given them 
permission to access . . . ." Dot-dot-dot. 

If you look at that same page -- where is that, Chris? -- 
it says: 


"You always can remove apps you've installed by 
using your apps settings . . . ." 

And then it gives a -- 

THE COURT: You said the next page? Sorry. 

MR. SNYDER: I'm sorry. Same page. Page 10. 

THE COURT : Okay. 

MR. SNYDER: Let me see where that is. 

Yeah, it's the bottom of the third paragraph, the last 
sentence. 


25 


THE COURT: Okay. Bottom -- 
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1 

MR. SNYDER: And then it says: 

2 

"But remember, apps may still be able to access 

3 

your information . . . ." 

4 

And so when Facebook wanted to refer to scope of 

5 

permission to use data, they refer to it as, in the referenced 

6 

language, "allowed." When they wanted to refer to a physical 

7 

constraint or limitation, they used -- 

8 

THE COURT: "Able." 

9 

MR. SNYDER: -- "able to," "be able to." 

10 

And then other language in the Data Use Policy further 

11 

discloses that Facebook "cannot physically," cannot physically 

12 

or technologically limit how apps -- Kogan, in this case -- use 

13 

data once they've obtained it. 

14 

THE COURT: Where'S that? 

15 

MR. SNYDER: Page 9 of the same policy. 

16 

THE COURT : Okay. 

17 

MR. SNYDER: And that's the board -- that's the second 

18 

board that is -- I don't need the board. Let me just -- 

19 

And there they say: 

20 

"Remember that these games, applications and 

21 

websites are created and maintained by other 

22 

businesses and developers" -- 

23 

THE COURT: Wait. Hold on. I want to find the 

24 

language that you're reading. 

25 

MR. SNYDER: And I apologize. Judge. 
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THE COURT: That'S okay. I found it. 

MR. SNYDER: "Remember that these games, applications 
and websites" -- 

THE COURT: Wait. Hold on. Give me one sec. I just 
want to read the paragraph -- 

MR. SNYDER: Yeah. 

THE COURT: -- that precedes it. 

Okay. Go ahead. 

MR. SNYDER: And this language. Your Honor, again, 
goes to any reasonable expectation of privacy. 

THE COURT: "Remember that these games, applications 
and websites are created and maintained by other 
businesses and developers who are not part of, or 
controlled by, Facebook, so you should always make 
sure to read their terms of service and privacy 
policies to understand how they treat your data." 

MR. SNYDER: Right. 

THE COURT: But this doesn't speak to the issue that 
we were just talking about, because this is telling me about my 
own interaction with apps on the Facebook platform. 

MR. SNYDER: Right. Precisely. 

THE COURT: But this is an issue about my friends 
being able to share my information with the app. 

MR. SNYDER: Precisely. And that's why these layered 


25 


disclosures, in combination, are so effective and robust. 
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You're told a number -- 

THE COURT: Effective from the standpoint of? 

MR. SNYDER: User disclosure and user understanding. 

Smith V. Facebook looks at these exact same terms in the 
cookies context, and the Ninth Circuit said there is no claim 
because these disclosures are sufficient. 

The district court in that case, the district court in 
that case, in a decision, a written decision, held, as a matter 
of law, there is no privacy claim here because these 
disclosures put the folks on notice that this was going to 
happen. 

And so here what you have. Your Honor, are multiple 
layered disclosures. 

The first disclosure is: What do you share on Facebook? 

THE COURT: Since you bring up the Smith case, it 
seems like courts often just say -- just go straight to the 
question it was disclosed or it was not disclosed, and they 
don't really pay attention to what the test should be, 
depending on which stage of the litigation you're at. 

And that sort of gets to this other question that I had 
that I asked you. I mean, is it -- we're at the 12(b)(6) 
stage. So I would think that you would have to -- the question 
is: What would a reasonable Facebook user interpret this to 

mean? 

MR. SNYDER: Yes. 
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THE COURT: Do you agree with that? 

MR. SNYDER: Yes. It'S an objective test. Courts -- 

THE COURT: And then I would think that you could only 
win at the 12(b)(6) stage if your interpretation is the only 
plausible interpretation. Do you agree with that? 

MR. SNYDER: I agree that if my interpretation -- you 
could say it both ways. If my interpretation is the only 
plausible, or the defendant's interpretation is unreasonable or 
implausible. 

And we believe this case is ripe for 12(b)(6) dismissal 
because, as in Smith v. Facebook, an ordinary, reasonable user 
in an objective test would understand these layered 
disclosures, which are robust and blunt, to mean, one, when I 
share with a hundred friends, my hundred friends may share with 
apps; two, we don't control what those apps, Kogan, may or may 
not do. 

And Cambridge Analytica demonstrates that in a dramatic 
way; that in the end, we can't control Kogan. We can only 
contract with him and hope that he honors his obligations to 
us. 

So if you're concerned, user, about what your friends 
might be doing with apps or if you're concerned about what apps 
might be doing with your data, you have multiple options. 

Option 1, you can control, in a granular sense, your 
privacy settings. You have control over your information. 
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1 

THE COURT: Well, privacy settings don't help. 

2 

MR. SNYDER: Privacy settings do help. You can -- and 

3 

that's the next disclosure. You can control most of the 

4 

information other people share with applications. 

5 

And then in another disclosure -- 

6 

THE COURT: But that's not privacy settings. That's 

7 

app settings. 

8 

MR. SNYDER: The notion that Facebook was hiding 

9 

anything, we think, is preposterous, because in multiple places 

10 

on multiple pages, repeatedly and clearly Facebook is saying: 

11 

If you share something with your friends, they might share it 

12 

with their apps; and if you're concerned about what the apps 

13 

are doing with your information, check their policies. 

14 

This is from the plaintiffs' own Complaint, paragraph 599: 

15 

"Facebook told users that by using their App 

16 

settings, they could prevent an App from accessing 

17 

their data via a Friend that used the App. This was 

18 

true at all relevant times." 

19 

There was no coercion. There was no surprise. There was 

20 

full disclosure. 

21 

THE COURT: It was true that Facebook told them at all 

22 

relevant times. 

23 

MR. SNYDER: Yes. 

24 

THE COURT: Not that it was the case, I think is what 

25 

they're saying. 
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MR. SNYDER: Right. My point, though, is that having 
been told "There is no expectation of privacy," you can't cry 
foul that there's gambling going on in this establishment when 
you've been warned. 

Second, 593 of the Complaint: 

"At all relevant times, the SRR told users, 'You 
own all of the content and information you post on 
Facebook, and you can control how it is shared through 
your privacy [hyperlinked] and application 
[hyperlinked] settings.'" 

So if you are a user concerned about your friends taking 
your data and information and sharing it with Spotify, and who 
knows what Spotify will do because you've been told Facebook 
does not control Spotify, we have given you a user-friendly 
mechanism for protecting that. 

It goes on, on 594: 

"The Data Policy . . . discussed in more detail," 
below, I guess, "[told] . . . users" -- "discussed in 
more detail" -- oh -- "how users could use the 
Privacy . . . and App Settings to control whether and 

how other users or other entities could access one's 
own content and information." 

Unless we treat Facebook users as imbeciles, which the law 
does not, a reasonable user, which is the standard in this 
district, as a matter of law, renders implausible the notion or 




PROCEEDINGS 


35 


1 

argument that these disclosures were either misleading or 

2 

insufficient. 

3 

The privacy settings, which are clearly disclosed and 

4 

accessible to users -- not buried in the fine print on the 

5 

bottom of an airline ticket or the bottom of a cruise line 

6 

disclaimer, but prominent, accessible, hyperlinked -- control 

7 

which friends can see your info. That is dispositive here. 

8 

THE COURT: You say we don't treat them as imbeciles. 

9 

and, of course, I agree with that. But it does raise another 

10 

question in my mind, which is, I assume that when we're 

11 

applying the "reasonable Facebook user" test, we are kind of 

12 

going back in time; right? We're imagining the reasonable 

13 

Facebook user in 2012 when they signed up for Facebook. Would 

14 

you agree with that? 

15 

MR. SNYDER: At the time the alleged -- I would say at 

16 

the time the alleged misconduct or privacy breach occurred 

17 

because -- 

18 

THE COURT: Why wouldn't it be at the time that 

19 

they -- 

20 

MR. SNYDER: Because you're bound by -- 

21 

THE COURT: Okay. We'll get to that in a second. 

22 

MR. SNYDER: That'S the incorporated by reference. 

23 

THE COURT: So it's sort of hard, because I guess what 

24 

I would say is that: Okay. I know about the Cambridge 

25 

Analytica scandal. I read all the news articles or some of the 
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news articles when the scandal broke. And then I, of course, 
started paying more attention and learning more once I got 
assigned this case. And I've spent a tremendous amount of time 
studying the disclosures and reading the words of the 
disclosures in the context of what has happened -- right? -- in 
the context of Kogan getting this information and disseminating 
it to Cambridge Analytica, in the context of the excellent 
briefs that both sides have filed. Right? And so when I drill 
down and I spend the probably hundreds of hours that I've spent 
looking at this issue, I can read this language and I can 
figure it out. 

And I think your interpretation probably is the best 
interpretation -- right? -- for an extremely well-informed 
person who is trying to figure out what this language 
discloses. 

But if I go back in time to 2012 or whenever somebody 
signed up for Facebook and nobody had even heard of Cambridge 
Analytica, and this concept of a friend sharing information 
with an app was much more abstract, would a reasonable user be 
able to go through these layers of disclosures as you've 
described them? 

You seem to think that word helps. I'm not sure -- 
I think it's actually sort of counterproductive to your 
argument. 

But would a reasonable Facebook user at the time, not an 
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extraordinarily well-informed Facebook user who's familiar with 
Cambridge Analytica, but a reasonable Facebook user at the time 
be able to go through all these layers of disclosures and 
figure out that if they send stuff to their friends, that it 
will inevitably result in the dissemination of all their 
information to hundreds, if not thousands, of corporations 
unless they go in and they change their app settings? 

MR. SNYDER: Your Honor, I respectfully but forcefully 
reject the premise of the question. You don't need to go back 
in time. There's no Cambridge Analytica moment that changes 
the canons of construction or the contract interpretation. 
There's no drill-down needed. There's no hundreds of hours 
needed. There's no well-informed person standard. 

There is an objective reasonable user standard, and that 
is governed by contract interpretation. And in the Yahoo case, 
this district held whether the terms of service adequately 
notified the reasonable platform user, that's the standard. 

And you can discern what the intention of the parties is from 
the writing here in only one way. 

THE COURT: And this is what I struggle with. Even if 
I agree that your interpretation is the best interpretation 
after staring at it for a long time and thinking about it and 
reading your briefs, we're talking about a reasonable user; 
we're talking about a 12(b)(6) motion. And am I really in a 
position, at this point, to conclude from all these words that 
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1 

the Facebook user who signs up in 2012 could only interpret 

2 

this language in the way that you're suggesting? 

3 

MR. SNYDER: Well, the answer is -- the answer is yes. 

4 

there is only one reasonable reading of this language. 

5 

And let me tell you again, the three sources of truth in 

6 

the disclosures that are dispositive, as a matter of law under 

7 

12(b)(6), that there's only one reasonable reading. 

8 

The privacy settings control which friends can see your 

9 

information. So you can -- if you really want to be private. 

10 

there are people who have archival Facebook pages that are like 

11 

their own private mausoleum. It's only set to me, and it's for 

12 

the purpose of repository, you know, of your private 

13 

information, and no one will ever see that. 

14 

THE COURT: That'S SO Strange. I'm curious. Do you 

15 

know how many -- like, what percentage of Facebook users -- 

16 

MR. SNYDER: I don't, but it's more common than you 

17 

think, because people like the user interface; they like the 

18 

functionality. And it's -- 

19 

THE COURT: One thing I could imagine is, whether it's 

20 

an individual or a business, starting off with the settings 

21 

private while they set up their -- 

22 

MR. SNYDER: Correct. 

23 

THE COURT: -- Facebook page -- 

24 

MR. SNYDER: Correct. 

25 

THE COURT: -- and then they go live with it. 
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MR. SNYDER: So the privacy settings control which 
friends can see your information. 

Once you go to friends, the gig is over because you've 
just gone -- taken a hundred people and pronounced your 
personal likes and dislikes. In fact, the very act of liking 
something and showing your friends that you like something is a 
non-private act. It's the whole premise of Facebook and social 
media, is to render not private your likes, your dislikes, your 
expressions. When I tag someone in a photo, it's to tell 
people, not keep private, that I'm sitting on a park bench with 
John Smith. So it's the opposite of private when you do that. 

But second, the app settings then control whether friends 
can share your data with apps. So that's the second point 
where you can say, "No, this is private. I want to have 
privacy rights in this information." 

But you're told if you don't change your app settings, 
friends can take your data and tell Spotify what music you 
like. If that's not enough, Facebook gives belt and 
suspenders, and the data policy says, "We can't control what 
these apps do with your information, so be careful; read their 
terms of service." 

And, Your Honor, there is no need to spend hundreds of 
hours with those paragraphs. The Courts rule repeatedly, 
whether it's the Yahoo case, the Perkins case in Google, the 
Smith case in Facebook, that where, as here, terms of service 
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and privacy policies are reduced to writing, it is appropriate, 
as a matter of contract interpretation, as a matter of law, to 
read them reasonably and not read them unreasonably. 

It would be unreasonable to read these provisions -- 
THE COURT: Unreasonably. 

MR. SNYDER: -- unreasonably. 

Let me say one more point on that. I say layered 
disclosures. The reason I say that, it sounds good, but also, 
Facebook took pains to make sure that it told its users, in 
multiple places that they might look, how to control friend 
sharing. It wasn't just in one place so that if a user elides 
over it, they may miss the action. 

If Facebook intended, as counsel suggested when I had the 
board blocking them, that Facebook was trying to hide 
something, there's a very easy way to deep-six these 
disclosures. Facebook did the opposite, put it on multiple 
touch points, data policy, app settings, privacy settings. 

And what's telling about the Complaint is -- which does 
take a hundred hours to read. In paragraph 408, this is an 
admission that is binding on the plaintiffs and, again, 
dispositive of Facebook's argument that there is no reasonable 
expectation of privacy here. 

"In order to gain access to non-public content 
and information, App Developers needed to request 
permission from the App User. Through this process. 
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App Developers gained access to the App User's content 
and information and the user's Friends' content and 
information." 

In other words, this is the paragraph 121 and 122 from 
their original Complaint that they struck in this Complaint, 
which acknowledged -- and I think it was fatal, which is why it 
came out of the Complaint -- that no app developer, Kogan or 
other app developer, obtained information in excess of or in 
contravention of any Facebook user's privacy settings. 

This is not a case where people go on Facebook and they're 
blindsided because friends are getting their data and sharing 
it with apps. This is a case where what happened up until 
Kogan was exactly, exactly what was advertised. 

And, of course, Facebook users have another choice if they 
don't like the platform. And ultimately, that's what this case 
is. Your Honor. If you read the Complaint and spend the 
hundred -- because it's 200 hours to read it twice -- what you 
realize is this is really just a broadside against Facebook. 

And I'm not going to argue right now. I'm going to beg you for 
five minutes at the end to argue standing. But this is why the 
Complaint is really a Complaint about ubiquitous sharing on 
social media platforms. 

They don't like it because when you go on a social media 
platform and share your information with a hundred people, 
you've lost control. And that creates anxiety, and that 
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creates concern. It doesn't give rise to a claim, which is why 
we say, in the raging debate that's going on in this country 
about what does privacy mean in the digital age, we're only 
about five years or six years into the digital age in the sense 
that apps were not widely adopted until maybe 2014, 2013, 2015. 
So we're less than half -- 

THE COURT: Yeah, I think that really cuts against 
you, because it speaks to what a reasonable Facebook user would 
understand when they're reading these disclosures in 2012. 

MR. SNYDER: No, Your Honor. 

THE COURT: That'S my whole point -- 

MR. SNYDER : No. 

THE COURT: -- is that the concept of an app and the 
interaction between your friend and an app is so much more 
abstract to the 2012 reader pre-Cambridge Analytica than it is 
now. 

MR. SNYDER: Facebook told users what would happen 
clearly, bluntly, repeatedly, and it happened. 

The point I was making is that to the extent that these 
plaintiffs or similarly situated people feel aggrieved by how 
the Internet has developed and how information sharing on the 
Internet has revolutionized human civilization, because people 
are now sharing things in a digital realm that they never did 
before, that's not for the federal district courts to invent 
new privacy rights. 
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And it's why -- it's why -- it's why. Your Honor, you have 
Congress debating these issues, why you have the FTC 
investigating these issues. But that does not mean in this 
case, on these facts, given the allegations, that this case can 
or should proceed because there is no common law tort or tort 
analogue that fits these facts. 

THE COURT: Do you want to talk a little bit about 
business partners? 

MR. SNYDER: Yes. 

THE COURT: They label these companies as "business 
partners." I don't know -- I can't remember where they got 
that from. Maybe they got that from The New York Times article 
or something. 

MR. SNYDER: Yeah. 

THE COURT: You label them as "device manufacturers." 

MR. SNYDER : Um-hmm. 

THE COURT: It'S not clear to me where you get that. 

I mean, it seems like you're rewriting their Complaint when you 
describe them as "device manufacturers." 

MR. SNYDER: So let me explain that. And thank you 
for asking for that clarification. 

This may be the most cynical of their arguments and, also, 
the one that demonstrates the point I just made, which is that 
the Complaint here is how Facebook operates, not that there is 
an actionable conduct. Let me explain why. 
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1 

First, you have to -- the Complaint conflates -- and maybe 

2 

we fell into the trap. I don't think we did -- device 

3 

manufacturers with so-called whitelisted apps and other apps. 

4 

So if you break down the players into four categories, you have 

5 

Kogan and Cambridge Analytica. That's the Cambridge Analytica 

6 

parties. You have other apps. Spotify. You have the so-called 

7 

whitelisted apps, which are the so-called -- 

8 

THE COURT: Yeah, I know. I'm just asking you, how 

9 

did you come up with "device manufacturers" to describe what 

10 

they call "business partners"? 

11 

MR. SNYDER: Because originally, they were -- 

12 

THE COURT: Because they had a list of business 

13 

partners. 

14 

MR. SNYDER : They do. They do. 

15 

THE COURT: And they don't seem like device 

16 

manufacturers. 

17 

MR. SNYDER: Some of them are; some of them aren't. 

18 

THE COURT : Okay. 

19 

MR. SNYDER: Let me break them up into their 

20 

constituent categories. And page -- thanks. Josh. 

21 

Paragraph 483 of the Complaint is what we're going to respond 

22 

to now, as well as Your Honor's Question 6. And it's alleged: 

23 

"Facebook partnered with a diverse set of 

24 

companies, including Business Partners, to develop and 

25 

integrate Facebook's User Platform on multiple devices 
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1 

and operating systems." 

2 

And so on and so forth. 

3 

And so let me address why that business partner allegation 

4 

does not get to first base under 12(b)(6). 

5 

First and critically, as to the Clapper requirement of 

6 

particularity, the Complaint, again, suffers fatally from the 

7 

absence of any allegation, among the thousands of allegations 

8 

in the Complaint, that any plaintiff's information was shared 

9 

with any of these business partners. 

10 

THE COURT: Well, I mean, I don't know. I mean, let's 

11 

say we're just limiting ourselves to these 53 business 

12 

partners. If I'm on Facebook and these business partners have 

13 

access to my data based on my interaction with them or based on 

14 

my friends' interaction with them, it's a virtual certainty 

15 

that at least one, and likely many more, of these business 

16 

partners will have my data. 

17 

MR. SNYDER: I respectfully disagree. And I also. 

18 

again, respectfully disagree with the premise that "virtual 

19 

certainty" is the standard. Under Clapper and Lujan, 

20 

L-u-j-a-n, this is precisely the kind of non-particularized 

21 

speculation, and the Lujan case made clear -- that was the 

22 

Wildlife case where -- 

23 

THE COURT: I know the case. 

24 

MR. SNYDER: Yeah. 

25 

And so there is no "reasonable likelihood" or "virtually 
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1 

certain" test. There's a duty to investigate, and these 

2 

plaintiffs are required -- this is my first point. There are 

3 

many other points. But the first point, they're required to 

4 

allege, plausibly, that any of these so-called business 

5 

partners received their data. They didn't. That is a pleading 

6 

failure. You can't just assume that they accessed Facebook on 

7 

a BlackBerry during that stump period between when Facebook 

8 

launched and apps were developed. And that's when the 

9 

BlackBerries of the world and the Apples of the world built 

10 

Facebook-like environments then. 

11 

THE COURT : Okay. 

12 

MR. SNYDER : Okay. 

13 

THE COURT: I understand that argument. 

14 

And then your second argument is that this, too, was 

15 

disclosed. 

16 

MR. SNYDER: Yeah. So, yes. As to all categories. 

17 

the disclosures were more than sufficient. And I think I have 

18 

a board for that one too. 

19 

And this really. Your Honor, is not only commonsensical -- 

20 

before we get to the language -- it really is no good deed goes 

21 

unpunished. I remember, because I was an early adopter of 

22 

Facebook in 2007, being excited that I could actually go on my 

23 

BlackBerry and access my Facebook information on my BlackBerry. 

24 

It was exciting because, before that, you had the flip phones 

25 

and maybe you could text on a flip phone. So now I had my 
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BlackBerry. 

And BlackBerry built this really kind of protoskeletal 
Facebook-like environment so that I could access my Facebook 
data on my BlackBerry. 

As a BlackBerry user and a Facebook user, heretofore only 
using Facebook on my desktop, how do I think my information got 
from Facebook to BlackBerry? 

THE COURT: Well, I think this is why you have changed 
the name of "business partners" to "device manufacturers." 

MR. SNYDER: No, I haven't. 

THE COURT: And it's why you're using BlackBerry as an 

example. 

MR. SNYDER : No. 

THE COURT: Because I actually think you have a -- to 
the extent that they are complaining that information was 
shared with device manufacturers, I think they have a pretty 
weak argument there. 

MR. SNYDER: Well, I'm not -- 

THE COURT: And SO I'm not as concerned with the 
device manufacturers. 

MR. SNYDER: Let me get to the others, then. 

I'm not changing any names. Your Honor, respectfully. 
Paragraph 486 of the Complaint -- thank you. Josh -- says: 

"Facebook formed Business Partnerships as early 

as 2007. These deals allowed Facebook to expand its 
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1 

reach by outsourcing to Business Partners the time. 

2 

labor and money required to build Facebook's Platform 

3 

on different devices and operating systems." 

4 

So my understanding is that the gravamen of that 

5 

allegation is device manufacturers. But then elsewhere in the 

6 

Complaint, they talk about whitelisted apps and other apps. 

7 

THE COURT: Let's assume that the Complaint makes 

8 

pretty clear that business partners are not limited to device 

9 

manufacturers. 

10 

MR. SNYDER: So let's go to other apps and so-called 

11 

whitelisted apps. Those are the other categories other than 

12 

device manufacturers. 

13 

THE COURT: No. Let's Stick with business partners -- 

14 

MR. SNYDER: But -- 

15 

THE COURT: -- which consists of a universe of 

16 

companies that is greater than device manufacturers. 

17 

MR. SNYDER: Well, I can list them. Your Honor, 

18 

because I have a list of them in front of me, and they are -- 

19 

they fall into two categories: other apps or so-called 

20 

whitelisted apps. And those are the only two other categories 

21 

in the Complaint, other than device manufacturers and Kogan, at 

22 

issue. 

23 

And as to those categories of so-called business partners. 

24 

from the user perspective, all apps are the same. Users are 

25 

told, as we've marched through over the past half an hour or 45 
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1 

minutes, that their friends could share their information with 

2 

apps. It didn't say with public apps or private apps or big 

3 

apps or small apps. 

4 

THE COURT: But I don't think the allegation about 

5 

business partners is that the business partners got Facebook 

6 

users' information through friends. If I'm misunderstanding. 

7 

you can correct me, but I don't think that's the allegation 

8 

relating to business partners. 

9 

I think the allegation relating to business partners is 

10 

that Facebook simply gave business partners access to this 

11 

data. 

12 

MR. SNYDER: I don't think so. Your Honor. My 

13 

understanding of the allegation is that they either gave it to 

14 

device manufacturers to facilitate a Facebook-like experience 

15 

on these other operating systems, one; or, two, that these 

16 

companies obtained Facebook user information, the so-called 

17 

business partners, as a result of friend sharing. 

18 

THE COURT: Interaction with friends? 

19 

MR. SNYDER: Friend sharing. 

20 

THE COURT: Where does it say that? I mean, where 

21 

does it say that in the Complaint? I interpreted the Complaint 

22 

to mean: Okay, we've got the app problem here where apps are 

23 

getting information about you through your friends without your 

24 

knowledge; and then we've got this separate problem with 

25 

business partners where Facebook was just giving data to these 
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business partners willy-nilly. 

And some of them are device manufacturers. And we can 
kind of understand why device manufacturers needed to get data. 
But we have these other companies and -- 

MR. SNYDER: If you look at the allegation, 563, Apple 
had access to the contact numbers. 

THE COURT: Wait. Hold on. Let me go to 563. 

MR. SNYDER: If you look at all of the partners, 
because I have them all broken down here on my outline, in each 
instance, it was to either facilitate use on an operating 
system or the ability to read -- there's an allegation, 557: 

Up to 2017, Yahoo had access to users' news feeds, 
including posts and users friends, for 100,000 users per 
month -- I guess that's what Your Honor is referring to -- for 
a feature that Yahoo had discontinued in 2012. 

But that was with user permission. Your Honor. They're 
apps. And so that's my point here. My point is that as to all 
categories, whether it's these private companies or public apps 
or otherwise, users are told that their information will be 
shared with third parties for purposes of targeting advertising 
back to the users, which the plaintiffs acknowledge the 
targeting of advertising is neither actionable or unlawful in 
any way. 

And so it's hard to discern, again, I guess -- 

THE COURT: I mean, I admit the allegations are a 
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little fuzzier here than they are in the third-party app 
context. 

MR. SNYDER: This is the problem with the Complaint, 
Your Honor. What happened is, they took every newspaper 
article and they just reprinted what they saw, without 
conducting a reasonable enough investigation to back any of it 
up as to this. 

And there's no claim here. Your Honor, that there is a 
data breach. There's no claim here that there is any use by 
any of these so-called business partners in excess of or in 
contravention of user settings. 

And so despite having so many at bats here, the most they 
can come up with on this business partner claim is an 
allegation that they don't like that these big companies got 
their data. 

Well, they had the ability. Your Honor, to restrict what 
information was shared or not shared on the privacy settings 
that we went through a little earlier. So this is not, again, 
forced or coerced sharing. This is sharing with the consent 
and knowledge of users. 

And so this is -- this stands in no different camp or no 
different analytical framework than any third-party app. And 
the question is: Is there a reasonable expectation of privacy 
where users were told that business partners, so-called, which 
are just another category of apps, would get their information? 
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1 Again, Your Honor, what we're talking about here is a 

2 complaint about information sharing on Facebook. The 

3 plaintiffs don't like it, and it's their right not to like it, 

4 but there is no common law tort, common law analogue, statute 

5 of Congress that makes it illegal for a social media company to 

6 share information that users voluntarily share with friends in 

7 circumstances where they were told, in clear and no uncertain 

8 terms, that once you share your information, you lose control 

9 of it and, even more, Facebook can't control what third parties 

10 do with it. 

11 So not only is there no serious invasion of privacy, 

12 there's no invasion of privacy at all, which, of course, brings 

13 us full circle to the taboo topic, which I'm not going to get 

14 to, which is Article III. 

15 THE COURT: The Other question that we haven't given 

16 you a chance to address yet -- I think you've addressed 

17 everything that I put out there except for this last issue, 

18 which is changing the terms of service after somebody agrees to 

19 it. 

20 And mainly, I guess what I want from you -- if you want -- 

21 I'm happy for you to argue it, if you want; but mainly, I want 

22 to make sure I'm just not missing any cases that you think are 

23 favorable to you -- 

24 MR. SNYDER: Yes, Your Honor. 


25 


THE COURT: -- at this point. 
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1 

MR. SNYDER: And I appreciated the question because 

2 

I think there is some misunderstanding, not in this Court, but 

3 

in general in the jurisprudence because of some of these old 

4 

cases that are hard to follow. 

5 

And I think this is a really easy, easy question. So the 

6 

answer is, there is clear incorporation by reference. You 

7 

don't have to say "incorporated by reference" under the case 

8 

law. And the best cases showing that the Data Use Policy, 

9 

sometimes called the privacy policy, was incorporated by 

10 

reference into the SRR -- 

11 

THE COURT: No. I was actually asking -- 

12 

MR. SNYDER : Oh. 

13 

THE COURT: -- the change -- I was more interested in 

14 

hearing from the plaintiffs on that question -- 

15 

MR. SNYDER: Got it. 

16 

THE COURT: -- because I think they're a little bit 

17 

behind the eightball on that issue. 

18 

MR. SNYDER: Yes. 

19 

THE COURT: But I think you are probably behind the 

20 

eightball on the issue of changing the terms of service after 

21 

users signed up. 

22 

MR. SNYDER : Aah. 

23 

THE COURT: And SO I wanted to -- 

24 

MR. SNYDER: Yes. 


25 


THE COURT: And as I said, I'm happy to hear you argue 





PROCEEDXNGS 


1 

2 

3 

4 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 

23 

24 


that a little bit -- 

MR. SNYDER: Yes. 

THE COURT: -- but mainly, I want to make sure I'm not 
missing any of the cases on that. 

MR. SNYDER : Okay. 

THE COURT: I know there were a couple of cases from 
San Jose on that. I think there was a Judge Koh decision and a 
Judge Grewal decision on that that are somewhat favorable to 
you. 

MR. SNYDER: There are good Ninth Circuit cases too. 
Your Honor. 

THE COURT: There'S a Donato decision that is 
distinguishable but, I suppose, partly helps you; partly helps 
the plaintiffs. 

What else -- there was one other case I think I read on 
this. But I just want to make sure I'm not missing any cases. 

MR. SNYDER: There'S actually a plethora of cases. 

THE COURT : Okay. 

MR. SNYDER: We can send them to Your Honor, or I can 
put them into the record. But -- 

THE COURT: Go ahead and tell me what other cases 
support you on this. 

MR. SNYDER: There are two principles. There are two 


25 


operative, dispositive principles here. 

The first is, users are bound, under California law, by 
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updated user agreements where the company, as here, updates its 
agreements on the platform, where, as here, there is a 
so-called unilateral modification clause which exists here. 

Tompkins versus 23andMe, Ninth Circuit case from 2016, 

840 F.3d 1016. There, the Court held that the modification -- 
unilateral modification clause is enforceable in California 
when -- and the Ninth Circuit didn't condition its holding on 
any sort of notice requirement. 

THE COURT: I have that in my stack, but I haven't -- 

MR. SNYDER: That was a -- 

THE COURT: I haven't read that yet. 

MR. SNYDER: That was a motion to dis- -- that was 
decided on the pleadings. 

THE COURT : Okay. 

MR. SNYDER: All, A-l-i, versus JPMorgan Chase, Ninth 
Circuit 2016/ Procurium, holding the same. Not unconscionable, 
fully enforceable. Again, no notice requirement. And, again, 
the issue was decided on the pleadings. 

Then the second, several district courts have, as 
Your Honor noted, held that continued use after posting of new 
terms constitutes assent. It's the Facebook versus Profile 
Tech case. Judge Grewal, 2013. 

There is a Google case from 2016, Judge Koh decided, 
September 23, 2016, M-a-t-e-r-a v. Google. And same holding. 

And then there is the DeVries case, I think Your Honor 
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1 

mentioned, from 2017 which holds: 

2 

"In general, courts have enforced new terms where 

3 

prior agreements included change-in-terms provisions." 

4 

There's the Campos case, another Northern District case 

5 

from 2019, Judge Corley: 

6 

"Plaintiff has not shown that the [unilateral 

7 

modification] provision is subsequently 

8 

unconscionable, especially given that the arbitration 

9 

agreement that applies to plaintiff's dispute is the 

10 

agreement she expressly agreed to." 

11 

There's a West versus Uber case. Judge Gutierrez, 2018, 

12 

citing Biometric, which I'll get to in a minute, and find that 

13 

the plaintiffs assented to unilaterally modified terms when 

14 

they continued using Uber for a year after receiving notice of 

15 

the changes in terms. 

16 

THE COURT: And then Biometric was Judge Donato's 

17 

case; right? 

18 

MR. SNYDER: Yeah. 

19 

THE COURT: Yeah. 

20 

MR. SNYDER: And then -- 

21 

THE COURT: That was the one where they sent -- 

22 

Facebook sent e-mails to -- 

23 

MR. SNYDER: Yes. 

24 

THE COURT: And maybe that happened here too. 


25 


MR. SNYDER: Yes. 
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THE COURT: We're going on the Complaint right now -- 

MR. SNYDER: Well, yeah. 

THE COURT: -- which doesn't contemplate -- 

MR. SNYDER: The truth is that Facebook did more than 
merely post the revised contract on its website. It gave users 
notice in a variety of ways. 

THE COURT: But we have to assume that it didn't for 
purposes of this motion; right? 

MR. SNYDER: Well, you know, I think that in, again, 
the Donato case, Facebook users agreed, you know; and so -- 

THE COURT: But that was, like, after -- that wasn't 
just a summary -- that wasn't a motion to dismiss. I don't 
think it was even summary judgment. Right? It was after an 
evidentiary hearing. 

MR. SNYDER: We don't need to -- the fact is, just so 
Your Honor could be comfortable knowing that Facebook wasn't 
trying to get one over, we did go beyond what the law required, 
which, again, is an example of how the Complaint is not only 
overblown -- 

THE COURT: So let's talk about what the law requires, 
then. I mean, I guess what I -- it does seem that there are 
cases going in both directions on this issue and the courts are 
sort of all over the map. 

But I guess what I'm having trouble wrapping my head 
around is, your argument seems to stand for the following 
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1 proposition. All right? Facebook has terms of service which 

2 say -- let's say I sign up in 2012, and the terms of service 

3 say you can share information with your friends and under no 

4 circumstances will we, Facebook, permit the disseminat- -- 

5 allow the dissemination of that information to anybody else. 

6 Your friends might do it. We can't prevent your friends from 

7 doing it. But we will not provide that information to anybody 

8 else. We will not give access to that information to anybody 

9 else under any circumstance. 

10 And I sign up for that. And then a year later, Facebook 

11 changes the terms of service and says: We have the right to 

12 disseminate all the information you make available to your 

13 friends to anybody we like for any reason under any 

14 circumstances. And ten minutes later, Facebook disseminates 

15 all of my information to a thousand companies. 

16 Your position, it seems to me, stands for the proposition 

17 that that's perfectly okay -- 

18 MR. SNYDER: I would say -- 

19 THE COURT: -- from a legal standpoint. 

20 MR. SNYDER: No, Your Honor, because I neglected to 

21 say and was about to say -- and then Josh reminded me to say - 

22 all of this is subject to the covenant of good faith and fair 

23 dealing. So you can't act in bad faith and you can't deal 

24 unfairly. 

25 But as a matter of contract interpretation and 
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enforcement, you have a remedy. If you don't -- 

THE COURT: You can't invoke the covenant of good 
faith and fair dealing where you do something that is directly 
authorized by the contract. 

MR. SNYDER: Well -- 

THE COURT: And SO if you are -- if the contract 
explicitly says that Facebook has the right to change the terms 
of service any time it wants without you agreeing to it, then I 
don't think there could be a breach of covenant of good faith 
and fair dealing claim because Facebook is doing what is 
explicitly authorized by the contract. 

MR. SNYDER: I would say, I have not studied that 
issue because it's not implicated here. But I will say that 
every case to consider this issue has held that, under certain 
circumstances, there could be an implied covenant of good faith 
and fair dealing claim. 

But let me make two other points, because your 
hypotheticals are challenging but, thankfully, are not this 
case. 

And so the terms here did not change in such a dramatic 
fashion. They're minor changes. But more important than that, 
what the cases say, each of them -- or many of them, at 
least -- is that the plaintiff has a remedy if they don't like 
this contract, if they don't like this bargain which says 
Facebook can change its terms of use from time to time. They 
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1 

have two remedies. They can review them from time to time to 

2 

see how they've changed, "or," or they can discontinue using 

3 

the service if they don't like the rules of the road. 

4 

And, of course, that, ultimately, is another fatal 

5 

problem. 

6 

THE COURT: So if I'm using Facebook, I need to -- 

7 

every day I need to go check to see if my terms of service have 

8 

changed? 

9 

MR. SNYDER: Actually not, because as the plaintiffs 

10 

know -- and I believe the Court could take judicial notice 

11 

under Rule 12(b)(6) -- Facebook announces any major changes 

12 

prominently, repeatedly, in press releases, on its website. 

13 

often e-mails. I mean, in the Donato case, often e-mails. 

14 

e-mails to users. 

15 

And California courts -- 

16 

THE COURT: But what you're asking me to rule is that 

17 

if I sign up for Facebook, it's my obligation to read the terms 

18 

of service every day -- 

19 

MR. SNYDER: That'S not -- 

20 

THE COURT: -- to make sure that they haven't changed. 

21 

MR. SNYDER: That'S not what I said. Your Honor. What 

22 

I said is that you're bound by the contract, and the 

23 

contract -- 

24 

THE COURT: Which says that we can change our terms of 

25 

service -- 
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1 

MR. SNYDER: Yes. 

2 

THE COURT: -- any time we want. 

3 

MR. SNYDER: Yes, Your Honor. That's the contract. 

4 

And if you don't like a contract, you don't have to sign it. 

5 

They have a remedy. They could discontinue service. 

6 

THE COURT: The problem is, I haven't yet agreed to 

7 

the new terms of service because I don't know what they are. 

8 

MR. SNYDER: You don't have to. Every case to 

9 

consider this that I've seen -- 

10 

THE COURT: That'S not correct. There are cases going 

11 

both ways on this. 

12 

MR. SNYDER: Well, okay. Well, I'm not aware of 

13 

either a controlling Ninth Circuit case -- 

14 

THE COURT: For example. Judge Tigar's Safeway case. 

15 

MR. SNYDER: Okay. So whether there's an outlier case 

16 

or not, the weight of authority, the substantial weight of 

17 

authority, including from the Ninth Circuit in the Tompkins 

18 

case -- and I haven't gotten to the California Supreme Court 

19 

cases -- hold -- 

20 

THE COURT: We'll get to those because this is a 

21 

question of California law. 

22 

MR. SNYDER: Right. 

23 

THE COURT: Tell me about the California Supreme Court 

24 

cases. 

25 

MR. SNYDER: The California -- 
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THE COURT: I would be bound by those cases; right? 

MR. SNYDER: Well, the California cases all support 

Facebook. 

THE COURT: Okay. What are they? 

MR. SNYDER: There'S Casas, C-a-s-a-s, which is a 2014 
intermediate appellate court. 

"... even a modification clause not providing for 
advance notice does not render an agreement illusory, 
because the agreement also contains an implied 
covenant of good faith and fair dealing." 

And California courts have held. Your Honor, that even in 
the face of a direct contractual right -- and this is from the 
Tompkins case at page 1016, 840 F.3d 1016. The Ninth Circuit 
writes: 

"California courts have held that the implied 
covenant of good faith and fair dealing prevents a 
party from exercising its rights under a unilateral 
modification clause in a way that would make it 
unconscionable." 

There's no allegation here that anything unconscionable 
occurred. 

There's another case, Serpa, S-e-r-p-a. 

THE COURT: So, in other words, if the provision that 
is adopted later would have been unconscionable when adopted 
originally, then it can't be adopted later. Is that what that 
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stands for? 

MR. SNYDER: I believe it says -- and the Casas case 
holds this. Tompkins is quoting or citing Casas. The Serpa 
case, I think, holds this -- that if a subsequent modification 
renders the contract unconscionable, such as some hypothetical 
that we can think of -- 

THE COURT: Right. 

MR. SNYDER: -- then the implied covenant of good 
faith and fair dealing may step in and bar the contracting 
party from exercising its contractual rights in a way that 
would be -- 

THE COURT: So, in other words, if you could never 
have agreed to it in the first place, you're not -- Facebook 
isn't allowed to adopt the same provision later. 

MR. SNYDER: I'm not sure whether unconscionability is 
only in the substantive outcome or the change, or delta -- 

(Co-counsel confer.) 

MR. SNYDER: Yeah. Okay. Thank you. 

So Perdue actually answers the question. Perdue versus 
Crocker Bank, California Supreme Court, 38 Cal3d. 913, at 
page 924: 

". . .we hold as a matter of law that the card is a 
contract authorizing the bank to [unilaterally] impose 
such charges, subject to the bank's duty of good faith 
and fair dealing in setting or varying such charges." 
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1 

So in the end, if a party is acting in a piggish or 

2 

blatantly commercially unreasonable way, the courts are going 

3 

to step in, in equity, and say -- in law and equity and say. 

4 

"No, we're not allowing this." 

5 

And so this is not that case. 

6 

THE COURT: That'S about, like, increasing fees 

7 

without -- okay. 

8 

MR. SNYDER: And that's not this case, of course. 

9 

THE COURT: Could I ask you, though. I mean, why 

10 

would it be so difficult for Facebook to simply say -- let's 

11 

say I agree to a terms of service, and then there's some 

12 

significant change in the terms of service. And I go on to my 

13 

Facebook account. Why would it be so hard for Facebook to just 

14 

create a pop-up which says, "Our terms of service have changed. 

15 

You need to agree to the new terms of service before you 

16 

continue to use Facebook"? 

17 

(Co-counsel confer.) 

18 

MR. SNYDER: Okay. Two answers to that. 

19 

One -- I got it. Josh. 

20 

One, they did. 

21 

THE COURT: Okay. But that's not in this motion. 

22 

MR. SNYDER: I understand you asked a question. 

23 

And so Judge Donato writes, Facebook sent -- that -- the 

24 

fact that the terms were changing, quote: 


25 


They were provided notice that the terms of the 
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PROCEEDINGS 

user agreement were changing through an e-mail from 
Facebook sent directly to the e-mail addresses each 
plaintiff had on file with Facebook. Each 
plaintiff -- none of whom disputes remaining an active 
Facebook user to this day -- would also have received 
a 'jewel notification' on his individual Facebook 
newsfeed. This individualized notice" -- 
THE COURT: I read -- 
MR. SNYDER : Okay. 

THE COURT: I read -- 

MR. SNYDER: So that's point one. 

Point two is, as a commercial actor, Facebook has its own 
business reasons why it does or doesn't decide to have pop-ups 
as opposed to e-mail notifications. But that doesn't give rise 
to any cause of action under the common law or any 
congressional statute. 

And, again, it comes full circle. Your Honor, to 
Facebook's basic point. 

Your Honor just asked a good question, a very good 
question. 

Should the Facebooks of the -- 

THE COURT: Facebook pays you a lot of money to say 
things like that -- 

MR. SNYDER : No. 


25 


THE COURT: 


to me. 
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1 MR. SNYDER: No, Your Honor. 

2 Should social media platforms be required to provide 

3 pop-up notices when they change their terms of service? That's 

4 a very interesting question. I'm sure editorialists would 

5 agree and disagree; legislators should agree and disagree. 

6 If that is going to be the law of the land, it's going to 

7 be because either Article ll legislature says so, a state 

8 legislator says so, the executive branch, the FTC says so. 

9 THE COURT: Or because California contract law 

10 requires it. 

11 MR. SNYDER: Or because California contract law 

12 requires it. 

13 And there is no principle of contract construction or 

14 canons of interpretation that would read the SRR and California 

15 law to render invalid Facebook's absolute constitutional and 

16 contractual right, because the right to contract is 

17 constitutionally based. We have a right to write our contracts 

18 reasonably. And so long as they're not unconscionable or 

19 violate the implied covenant of good faith and fair dealing, as 

20 Judge Grewal said and other judges said, the plaintiff is not 

21 without a remedy. They can stop using Facebook if they don't 

22 like it. 

23 THE COURT: Okay. So what I would like on this issue 

24 is just a letter from both sides by Friday, listing --no 

25 argument, no parenthetical -- just listing the cases that I 
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should read on this issue. Okay? Because it wasn't -- it 
didn't -- I know there were page limits in the brief, and it's 
nobody's fault, but it didn't get great treatment in the 
briefs, and I think it's an interesting and important question. 

MR. SNYDER: I know I'm about to sit down. May I just 
ask two questions? The first is: Does Your Honor want me to 
address Question 2, which is the incorporation by reference 
question? 

THE COURT: No. That'S okay. 

MR. SNYDER: Okay. And then, two. I'll just ask 
Your Honor to consider giving me five minutes. 

THE COURT: Let's see where we are at the end 
because -- 

MR. SNYDER: It'S very pertinent to -- of course, I 
showed restraint, and I hope -- but the arguments I just made 
obviously dovetail with an informed standing analysis. 

THE COURT: I will tell you that I've given a 
tremendous -- both at the last hearing and in preparation for 
this one, I've given a tremendous amount of consideration to 
the standing issue. 

MR. SNYDER: Of course. 

THE COURT: And I really don't think I need to hear 
any further argument on it. 

MR. SNYDER: Well, I will just -- I appreciate and 
respect that. If I can reserve, at Your Honor's sole 
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1 

discretion, three minutes at the end, I'd appreciate you 

2 

begging my indulgence. 

3 

THE COURT: So what I propose that we do now is, I 

4 

propose that we take a five-minute break. We've been going for 

5 

about an hour and a half. And then we can return and I can 

6 

hear from the plaintiffs and maybe give Facebook the last word 

7 

briefly, hopefully not on standing. 

8 

And we'll aim to wrap up at about l o'clock so that people 

9 

can get some lunch. Okay? 

10 

All right. Thank you. 

11 

THE CLERK: Court is in recess. 

12 

(Recess taken at 12:02 p.m.) 

13 

(Proceedings resumed at 12:12 p.m.) 

14 

MR. LOESER: Your Honor, while people are piling in, I 

15 

have a PowerPoint that I'll hand up to you. 

16 

THE COURT: You realize you're not going to be able to 

17 

get through this PowerPoint. 

18 

MR. LOESER: I know. But you read everything; so -- 

19 

THE COURT: We don't need to go through this 

20 

PowerPoint. What I would like to do is maybe just jump right 

21 

in and have you respond on the consent points. I mean, I think 

22 

that's sort of the meat of it. 

23 

How do you want to respond to their points regarding 

24 

consent with respect to third-party apps and business partners? 

25 

Why don't we start with third-party apps. 
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MR. LOESER: Sure. And tracking with the questions 
that you asked -- and just so you know. I'll be answering some 
of the questions, including the consent questions. Ms. Weaver 
will jump up for other matters. And at some point, we'll 
probably occupy both podiums unless you tell us not to. 

THE COURT: Great. That'S fine. 

MR. LOESER: And the -- and so Question Number 2 is 
this issue of corporation; so we'll get back to that and we'll 
talk about consent. 

First, just as a threshold issue, this notion that there 
are no privacy rights for people on Facebook, I won't waste a 
lot of time on that. It's obviously -- it relates to consent 
in the sense that they're saying that it really doesn't even 
matter if you consented or not; there's no privacy rights. And 
that's clearly wrong and clearly inconsistent with positions 
Facebook has taken in other cases like the SCA case that we 
talked about the last hearing. So, but I think it's obviously 
wrong. And so the actual disclosures are extremely important. 

And we talked a bit about this at the last hearing as 
well, but it's worth just mentioning. And as you have 
indicated in a lot of your questions, it's obviously a very 
factual issue. It's generally not decided on motions to 
dismiss. It's not the least bit uncommon for -- 

THE COURT: Well, a fair number of courts do decide 
them on a motion to dismiss, but they don't -- it seems like 






PROCEEDINGS 


70 


1 

2 

3 

4 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 

23 

24 

25 


they often do so without inquiring whether it's appropriate to 
decide them on a motion to dismiss. 

I mean, they kind of just look at the language, and they 
say that was disclosed, and they move on without inquiring 
whether there are other plausible interpretations of the 
language and whether it's appropriate for them to be making 
these rulings at a 12(b)(6) stage as opposed to a later stage. 

MR. LOESER: Yeah. I think, fortunately, in this 
district, where you had a lot of social media cases, cases 
against Facebook, Google, Yahoo, the courts have been extremely 
thorough in their analysis, have looked at what the disclosures 
really say. 

The Opperman case, which we talked about last time. 

Judge Tigar really indicated what the standard was very 
clearly. He indicated why it's not appropriate to decide. 

Where you have language that people can interpret in different 
ways, it is not appropriate. 

So there are cases -- Facebook likes to talk about the 
Smith V. Facebook case in which the Ninth Circuit ruled as a 
matter of law. That really stands in stark contrast to this 
case. There, the case was about whether Facebook breached its 
duties or its promises when it monitored website browsing. And 
they disclosed precisely that, that they monitor website 
browsing. That's the kind of circumstance where the Court can 
say, "Look, there's no dispute. There's nobody even disputing 
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it." The plaintiffs didn't even dispute that the terms were 
binding on them, unlike this case. So that's the rare 
circumstance. 

The much more common circumstance is in the litany of 
cases that we've cited in our briefs and which Judge Koh and 
Judge Tigar and others go through and very clearly indicate, 
when you have two competing interpretations, it's not 
appropriate for a motion to dismiss. 

So, first, the threshold issue is -- 

THE COURT: So on that issue, let me ask you. What 
would you expect -- so the idea behind not ruling on an issue 
like this as a matter of law at the motion to dismiss stage is 
that there will be something that will help you, at a 
subsequent stage in the litigation, figure out what the true 
answer is. Right? 

And so what is that in this case? I mean, what 
information -- let's say we got to the summary judgment stage. 
What information would I be able to bring to bear on this 
interpretation question that I can't bring to bear now? 

MR. LOESER: Well, first of all. Your Honor, just -- 
and this is, again, not the least bit unusual. We have an 
interpretation of these documents, and they have a different 
interpretation. So that just, by its nature, means there's a 
disputed issue of fact, subject to you or a jury then decides 
whose interpretation is more reasonable. 




PROCEEDINGS 


72 


1 

THE COURT: Well, it depends how plausible your 

2 

interpretation is. But let's assume we get past the motion to 

3 

dismiss stage. 

4 

Contract interpretation is a question of law; right? I 

5 

mean, if it is a contract, would it be a jury question -- 

6 

MR. LOESER: It would. 

7 

THE COURT: -- as to what this disclosure disclosed? 

8 

MR. LOESER: When there are two plausible 

9 

interpretations of a contract, I think it's a question of fact. 

10 

The jury decides what the reasonable interpretation is. 

11 

THE COURT: I always thought it was like -- I thought 

12 

California law was pretty clear that contract interpretation is 

13 

a question of law for the judge to decide. 

14 

MR. LOESER: Well, here's how Judge Tigar looked at 

15 

the issue in the Opperman case. And it's a bit of a long 

16 

quote; so I'll try and skip to the end but frame it. And this 

17 

is 205 F.Supp.3d at 1077. The Court is looking at exactly what 

18 

you're looking at. They say the contract and the terms means 

19 

this. The plaintiff says it means that. The plaintiff said 

20 

they didn't disclose -- 

21 

THE COURT: And it's for the jury. 

22 

MR. LOESER: Yeah, for the jury. And the judge -- 

23 

THE COURT: Judge Seeborg has -- I think it's a 

24 

Facebook case, where he says the same thing. But I just -- 

25 

MR. LOESER: Well, I'll just read the end, the last -- 
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THE COURT: Is there any analysis of California 
contract law in those cases and any engagement on the question 
of whether it should be a judge or a jury question? 

MR. LOESER: Well, I believe so. And I'd have to flip 
open Opperman to see if he's citing other Ninth Circuit or 
federal cases or California cases. I believe he does dip into 
state cases, but I'll check that. 

But the last line of the quotation I was going to read, he 
writes: 

"It remains to be seen whether these expectations 
were objectively reasonable, but that is a question 
for the jury, not this Court." 

And there are other cases that we've cited in which 
the courts indicate that the Court would have some discomfort 
substituting its own views for that of the jury when deciding 
these disputed issues of fact. 

So I think the other thing, you're asking what would we 
show later? Well, discovery would occur. And in addition to 
just the contractual terms, I think it's also important to 
hear -- 

THE COURT: But what discovery would be relevant to 
the question of how a reasonable Facebook user in 2012 would 
interpret this language? 

MR. LOESER: Well, we could certainly ask questions 
about why -- what does the language mean to Facebook? What do 
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1 they think the theory is? 

2 For example, there were things said today about how nobody 

3 that uses Facebook and shares anything would ever believe 

4 anything is private. Well, I'm pretty sure that's not the view 

5 of executives at Facebook. They would strongly disagree with 

6 that statement. I know they would, because they've said just 

7 the opposite in courts and they've said just the opposite 

8 publicly. 

9 So there's all kinds of testimony we could elicit about 

10 the surrounding circumstances of the disclosures and the 

11 reasonable expectations of Facebook and people utilizing 

12 Facebook. 

13 THE COURT: I assume you would ask for all documents 

14 that reflect Facebook's decision for what language to adopt in 

15 its terms of service or in the section in its terms of service 

16 on apps. 

17 MR. LOESER: Right. 

18 THE COURT: Third-party apps. 

19 MR. LOESER: There would be all kinds of questions. 

20 MS. WEAVER: It'S funny you should raise this because 

21 one of the points that we were talking about is that in our -- 

22 we issued a set of very narrow requests for production, and our 

23 RFP Number 5 sought, actually, the disclosures that Mr. Snyder 

24 was referring to; i.e., please produce to us all documents that 

25 reflect notice to users when you change your terms of service. 
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1 And we received nothing from them that directly 

2 communicated to users, "We are changing terms of service." So 

3 maybe that's just incomplete discovery. We haven't had the 

4 opportunity to pursue it. But certainly, that notice issue, in 

5 the terms of reasonableness and context, is important. 

6 MR. LOESER: If you look through the cases that decide 

7 the issue of what the disclosures mean on summary judgment and 

8 other stages, invariably they're referring to deposition 

9 testimony of the plaintiffs; they're referring to deposition 

10 testimony of the executives about what was intended. 

11 THE COURT: But the test is a reasonable Facebook 

12 user; right? It's not -- it sounds like from the way the 

13 courts treat it and it sounds like -- it sounds like both sides 

14 agree that it's the reasonable Facebook user at the time. And 

15 so it sounds like an objective inquiry, not a subjective one, 

16 where the actual -- where the actual views of the plaintiff 

17 would be dispositive, which is weird because it's a contract 

18 and we're -- 

19 MR. LOESER: Right. 

20 THE COURT: -- inquiring about whether there was a 

21 meeting of the minds. 

22 MR. LOESER: Well, and I think that the -- like, the 

23 allegations in the Complaint by the plaintiffs we would say are 

24 reasonable interpretations of the contract. And so it bears 

25 upon whether the language is reasonable, that you have a bunch 
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of people who read it that way and they reasonably concluded 
that that's what it means. 

You know, I can -- there's a variety -- if discovery were 
to go forward here, we would ask for all kinds of information 
that I think would fill out the question for you about: Whose 
interpretation is more reasonable? What is it based on? What 
did Facebook executives believe? What do they think these 
things mean? And how did people like the plaintiffs react to 
them and take them into account when deciding what to do? 

THE COURT: You were going to say, other than that 
sort of discovery. I think I interrupted you before you were 
about to say that there's some other type of information that 
could be brought to bear. 

MR. LOESER: Right. I would just refer the Court to 
the fact that there are a number of regulatory agencies that 
have investigated Facebook, investigated their conduct, their 
disclosure, the terms of service, data policy, all of these 
documents they took into account. 

In England, the DCMS collected a huge amount of 
information, evaluated Facebook's conduct, and came to 
conclusions. And those conclusions were that Facebook had not 
obtained lawful consent and Facebook had not been clear. 

And, you know, the FTC, back in 2011, looked at these same 
disclosures, evaluated them. At the time, the issue was -- 
which is still an issue pertinent to today, which is: Was it 
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1 

clear to people that their privacy settings didn't actually 

2 

control who got to see their information? The FTC said, based 

3 

upon its collection of evidence, "No, it's not clear. These 

4 

disclosures are not adequate." 

5 

And so that kind of evidence was gathered by these 

6 

regulators, and they came to a determination which -- 

7 

THE COURT: Are you talking about the current FTC 

8 

investigation? 

9 

MR. LOESER: In 2011 -- they're sort of joined. In 

10 

2011, the FTC told Facebook, "Your disclosures are not 

11 

adequate. You are not making it clear to people that your 

12 

privacy settings don't actually control who sees this stuff." 

13 

THE COURT: Right. I was confused. I thought you 

14 

were talking about -- because what the FTC is investigating now 

15 

is whether Facebook violated the terms of the consent decree -- 

16 

MR. LOESER: Right. 

17 

THE COURT: --by not adequately disclosing -- 

18 

MR. LOESER: Right. 

19 

THE COURT: -- what it was doing with this 

20 

information. 

21 

MR. LOESER: Right. Because what Facebook agreed in 

22 

2011 was that if they were going to disclose information in a 

23 

way that exceeded people's privacy expectations or privacy 

24 

settings, they would have to get express informed consent to do 

25 

that. 
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And the FTC is investigating whether, when they gave the 
information -- I think, based upon public disclosures and 
articles -- when they gave information to whitelisted apps and 
to business partners and Cambridge Analytica, were they, in 
fact, exceeding the users' privacy settings, which is what we 
allege in this case, and the FTC is evaluating whether that 
occurred. 

Now, at the motion to dismiss stage, I think it's fair to 
look at that. You don't have to -- 

THE COURT: But is the FTC inquiring into whether, 
like, a reasonable Facebook user would understand these 
disclosures to mean what Facebook says they mean? Or are they 
engaging in a somewhat different inquiry; namely, whether 
Facebook violated its agreement with the FTC, the consent 
decree with the FTC? 

MR. LOESER: I'm not in the room. Your Honor, but I'm 
sure that both of these things are being discussed. 

I would think that if they're saying to Facebook -- and 
Facebook's counsel, who I think is involved in that 
investigation, could probably get up and explain this better 
than me. But if the allegation is they violated the consent 
decree -- and the consent decree required that they get express 
consent if they were going to exceed privacy settings -- then 
what Facebook, I'm sure, is telling them is that "We didn't 
exceed privacy settings, and here are our disclosures." The 
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1 

FTC, I would think, would be evaluating those disclosures. 

2 

THE COURT: I mean, I think about, like, the food 

3 

labeling cases, where there's something on the label of 

4 

vitamins or something and the plaintiff comes in and argues 

5 

that it's misleading. And there's a battle of experts. And 

6 

the experts conduct surveys, and they offer opinions about what 

7 

the ordinary consumer would interpret this disclosure on the 

8 

label to mean. 

9 

I mean, when you hear "reasonable Facebook user" and "What 

10 

would a reasonable Facebook user understand these words to 

11 

mean?" you think about those surveys. But, again, it seems 

12 

sort of weird in the context of a contract between, you know. 

13 

Facebook and individual users to conduct that sort of inquiry. 

14 

So anyway, I was curious if you thought that that sort of 

15 

thing would be relevant to answering the question. 

16 

MR. LOESER: Go ahead. 

17 

MS. WEAVER: Well, yes. I mean, I think, certainly. 

18 

the user experience in this particular case -- 

19 

THE COURT: I'm sorry. I'm enjoying the contrast 

20 

between what he's brought up to the podium and what you've 

21 

brought up to the podium. 

22 

MS. WEAVER: It'S a little -- uh, yeah. What can I 

23 

say? 

24 

THE COURT: Sorry. Go ahead. 

25 

MS. WEAVER: But I do think you're right. Your Honor, 
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that the user experience, if we got to trial in this case, we 
would want to actually replicate what the platform looked like 
in 2007. I mean, we have plaintiffs who joined in 2005, before 
there were any policies. 

So the question is: What did it look like? How did they 
change it? Is it reasonable to understand that you would go 
back -- and as they added -- I mean, for example, the app 
setting was not added until December 2009. And what -- you 
know, somebody who signed up, as you noted previously, might 
have a very different experience trying to hunt for that when 
they thought that they knew already how the platform worked, 
especially if they aren't getting a notice saying, "This is 
where you need to go." 

THE COURT: But in any of these other cases, like you 
mentioned Judge Tigar's case -- that was the Safeway case; 
right? And he said this is a question for a jury. Was there a 
battle of experts in that case? Or was it a question about 
what the individual plaintiffs in that case understood the 
language to mean? 

MR. LOESER: I'm just looking at the decision. 

Your Honor, to see if there's any reference to the actual -- 

THE COURT: I think in the decision, he's just looking 
at the language and saying -- I didn't see any reference to, 
like, a battle of the experts or anything. I was curious if 
there was one at trial or if there even was a trial. I don't 




PROCEEDINGS 


81 


1 

2 

3 

4 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 

23 

24 

25 


even know if there was a trial. 

MR. LOESER: Yeah. All I can say, just looking at 
this quickly, is the Court was considering the evidence that 
the plaintiffs presented, which included their own testimony 
about what they believed the service was supposed to be, based 
upon the disclosures that were given to them. 

MS. WEAVER: But here, also at issue is the conduct. 

I mean, there are a lot of questions of fact around what -- 
and, in fact, you know, even in the defendant's presentation, 
there's a citation here to a paragraph 485, when we were 
discussing business partners. And, you know, we've quoted: 

"Facebook notes that this list is 'comprehensive 
to the best of our ability.'" 

But it stated: 

". . . it is possible we have not been able to 
identify some integrations . . . ," et cetera. 

So there's a lot of unknowables out there. We've tried to 
plead a very particularized complaint, but we don't actually 
know -- to be truthful, we don't know all of the facts about 
business partners. We at least know about some of the apps 
because early on, there were more disclosures. There have been 
fewer public disclosures. 

THE COURT: Yeah. But you don't go past the 12(b)(6) 
stage because we need to find stuff out. The question I'm 
asking is: What type of information would I use that I'm not 
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1 capable of using now at the 12(b)(6) stage to resolve this 

2 interpretation question? Which seems like -- it seems like 

3 it's a hybrid contract interpretation question/disclosure 

4 interpretation question. 

5 MR. LOESER: Well, and I think -- and I apologize that 

6 we're going back and forth; but, again, we'll do it until you 

7 tell us we can't. 

8 But the point you made earlier about changing expectations 

9 about how social media works, for example, I could see the 

10 value of an expert who would talk about that, who would talk 

11 about what people reasonably expected based upon how apps were 

12 used and a new technology and the fact that -- it could look at 

13 language that Facebook uses now, for example, and contrast it 

14 to what it was using before to make the point that people 

15 reasonably -- their interpretation -- the plaintiffs' 

16 interpretation that they provided in the Complaint is a 

17 reasonable one. 

18 So, sure -- 

19 THE COURT: But you probably could have done that; 

20 right? I mean, that could have been something that we 

21 considered at the 12(b)(6) stage -- right? -- the language that 

22 Facebook uses now compared to the language it used before? 

23 MR. LOESER: Correct, and we have cited that. 

24 I'm suggesting that there would be a role of an expert 

25 witness to talk about reasonable expectations. 
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Also, I don't want to rule out the relevance of actually 
taking depositions of Facebook people. You know, 

Mr. Zuckerberg talks a lot publicly about how important privacy 
settings are and what they intended to communicate with their 
disclosures and what mistakes were made and what needs to be 
made more clear. 

Well, a deposition in which we get into those topics, 

I think, would be highly useful for determining ultimately 
whether the plaintiffs' interpretation is reasonable. So 
I think there's discovery of Facebook people who were involved 
in running the company, given how important they say privacy is 
to people's experience. 

And I think that's a point that's worth stepping back and 
making. Then I really do want to get into the specific 
disclosures. 

And that's the nature of Facebook. I think we all should 
have a lot of concern and take pause when Mr. Snyder tells 
everyone that there is no expectation of privacy when people 
use Facebook. And the case law, I think, is really important 
to consider when it talks about what happens when a company 
creates the reasonable expectation of privacy and induces 
people to share. And that really is the currency of the realm 
for Facebook, is they need people to share data. That's how 
they make money. That's how they made $55 billion last year. 

And this notion that you can create this reasonable 
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expectation of privacy to induce people to share but then come 
into court and say that it's completely unreasonable, as a 
matter of law, for people to have any expectation of privacy 
I think is really concerning. And particularly on a motion to 
dismiss, it really shouldn't help Facebook. 

But more broadly, I think it's a very concerning point 
that they're making here, given how much they've done to create 
this Facebook experience that gets people comfortable sharing. 

So, but getting into disclosures themselves, you know, 
there are -- and the briefing has gone through and the 
Complaint goes through in some detail the different disclosures 
Facebook made. Your Honor, I think, rightly noted, when 
Mr. Snyder was referring to our discussion of those disclosures 
as somehow admissions that people were given information, 
obviously, those were not admissions. 

In fact, usually, the paragraph -- like he raised 
paragraph 599 which talks about a disclosure. The very next 
paragraph, 600, says contrary to that disclosure. 

So we have gone through all these things. I think there's 
a reason why we listed them in the Complaint. We do want 
the Court to consider them. 

And in our briefing, we've gone through and we've put 
these disclosures and the misconduct into different buckets. 

I think that, just for the sake of time, we won't go through 
all of the categories; but Your Honor is aware there's business 
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partner disclosures that we think are misleading; there's 
whitelisted apps; there's disclosures to advertisers. They 
said they wouldn't disclose your information -- personal 
information to advertisers, but it was misleading because a lot 
of the business partners are advertisers. And then there's 
these disclosures about third-party apps. 

And so what we'll talk about now, I think, are business 
partners and third-party apps -- 
THE COURT : Okay. 

MR. LOESER: -- and websites. 

So -- and we talked about business partners in some detail 
before; so perhaps that's a shorter conversation. 

But what Facebook told people was: We may provide 
information to service providers to help us bring you the 
services we offer. 

And we've listed these disclosures on page 26. We learned 
from the last hearing. We have paragraph references on most of 
these slides. Here, some of these disclosures were provided in 
a declaration, and we refer to the declaration. 

THE COURT: But what I want to -- I understand the 
disclosure. I understand that the description of who is being 
given information in that disclosure seems different from the 
list of companies that you've included on 
paragraph 400-something of your Complaint. 

But what I guess I'm still struggling with a little bit 
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1 with respect to business partners is, putting aside the device 

2 manufacturers, how did Facebook -- I mean, they say that: Oh, 

3 those are just -- those other ones are just third-party apps. 

4 And I guess my response to that is, I look through your 

5 Complaint and I'm not really sure who those people are or what 

6 bucket they should fit in. I think I get the device 

7 manufacture point. I think it's kind of a weak point for you 

8 because I think it's pretty obvious that if I'm using Facebook 

9 on my iPhone, iPhone is going to have access to my data. Maybe 

10 less obvious in 2012, but probably still fairly obvious. 

11 But, so that's why I asked you, pick a couple of these 

12 companies and explain to me a -- couple of these business 

13 partners and explain to me what the complaint alleges about 

14 what happened with respect to those companies that was not 

15 disclosed. I just don't -- I still don't quite understand. 

16 MR. LOESER: Right. And Ms. Weaver is going to 

17 address that. But I will make the point, just before you move 

18 on to that, I think it is important to look at the specific 

19 language of the disclosures themselves. And where terms such 

20 as "service providers" or "vendors" are used, that's the 

21 analysis that you have to do and that Judge Tigar did and 

22 Judge Koh did when looking at the particular disclosures. 

23 THE COURT: I totally get that point. 

24 MR. LOESER: Yeah. And SO if there's -- 


25 


THE COURT: I get that point. 
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1 

MR. LOESER: Right. 

2 

THE COURT: But the part that I don't quite get from 

3 

your Complaint is, what were the circum- -- what did Facebook 

4 

do with this information? Did Facebook just say, "Yahoo, here. 

5 

have all this information"? Or what was the arrangement 

6 

between Facebook and these business partners that resulted in 

7 

the business partners getting the data? And was it through 

8 

friends? You know, was it through my friends that these 

9 

business partners got my data, or was it through me, or was it 

10 

directly from Facebook? All of that is a little bit fuzzy. 

11 

MR. LOESER: Right. 

12 

MS. WEAVER: So those allegations. Your Honor, are in 

13 

489 and 490, for example. The three that we picked included 

14 

Yahoo, which you just referenced. 

15 

THE COURT: Okay. Wait. Hold on. Hold on. 

16 

MS. WEAVER: No problem. 

17 

THE COURT: Let me go to those. Sorry. You're -- 

18 

MS. WEAVER: Yes. So 484, you're right, was the 

19 

paragraph that lists the 53 business partners that Facebook has 

20 

currently identified. 

21 

And just to circle back to the point I made earlier, on 

22 

the issue of determining at a motion to dismiss whether these 

23 

particular disclosures are adequate, you might want to know if 

24 

there are other entities out there that are not on this list. 

25 

And Facebook is saying here that there may well be others. 
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So, of course, I understand our burden at the pleading stage, 
but it's a little bit of a Catch-22. 

What we know is at 486, the business partnerships were 
formed as early as 2007. We know that, for example, with 
Yahoo, if you go to 489: 

"... Yahoo, was [sic] able to read the streams of 
users' and users' Friends posts, while others, like 
Sony, Microsoft and Amazon, were able to obtain . . . 

e-mails." 

And so the question arises, if, as Mr. Loeser says -- 

THE COURT: So what do we know about how? Like, was 

this -- 

MS. WEAVER: We know that they used -- 
THE COURT: Were they obtaining this stuff through my 
friends, or were they obtaining it through some interaction 
with me or, sort of, through some separate partnership or 
arrangement with Facebook? 

MS. WEAVER: So the technical answer is that they were 
obtaining content and information through a Graph API. That's 
not exactly what you are asking, but I wanted to give you that 
information as well. So it's through a platform that Facebook 
sets up so that they can obtain it. 

And, yes, it's our understanding that what they are 
getting is the world. And, in fact, I believe -- maybe it was 
Netflix. It wasn't just friends. It was friends of friends. 
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1 

So that's an even larger community. And, again, no disclosure. 

2 

we would argue, applies to this. 

3 

THE COURT: But is it as a result of my friend 

4 

interacting with Netflix? 

5 

MS. WEAVER: Yes. 

6 

THE COURT: With the Netflix app? 

7 

MS. WEAVER: Yes. 

8 

THE COURT: So it is the same -- there is really an 

9 

overlap between your list of business partners and third-party 

10 

apps? 

11 

MS. WEAVER: Right. And -- exactly. And I'm not 

12 

really sure -- we're not sure -- there's been -- there are 

13 

three groups; right? There's apps before 2015. And then the 

14 

FTC and Facebook agreed that those apps would be disconnected. 

15 

And then it was only later revealed that there were these 

16 

whitelisted apps that includes Netflix and, for some reason. 

17 

Airbnb and Alibaba. And, you know, there's a -- and. 

18 

frankly -- 

19 

THE COURT: Right. But the way -- it sounds like what 

20 

you're saying -- but I want to make sure I understand -- is 

21 

that the way these companies, like Netflix, Alibaba, whoever. 

22 

got my data -- I'm using me hypothetically; I'm not on Facebook 

23 

but -- the way they got my data is by interacting with my 

24 

friend, and I had not adjusted my app settings to prevent the 

25 

apps from getting my data from my friend. 
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1 

So it's basically the same analysis for these business 

2 

partners as it is -- with the possible exception of the device 

3 

manufacturers, it's basically the same analysis for these 

4 

business partners, in terms of disclosure, as what you're 

5 

calling third-party apps. 

6 

MS. WEAVER: That is true, but with an important 

7 

exception. Facebook actually disabled the app setting that 

8 

turned off app sharing in, I believe, 2015, and they told users 

9 

that. And yet, after that date, they gave data to whitelisted 

10 

apps. 

11 

THE COURT: Right. Okay. 

12 

MS. WEAVER: And SO there's no mechanism there. Like, 

13 

our understanding is that it is somehow through friends of 

14 

friends, but there's no consent and there's no ability of the 

15 

user to turn it off anymore. 

16 

THE COURT: So then what is the point of creating this 

17 

category of business partners in your complaint? I mean, it 

18 

seems like kind of an artificial category of entities receiving 

19 

my data. 

20 

MS. WEAVER: Well, I agree with that. 

21 

THE COURT: Seems like half of them or more should 

22 

just -- they fall in the same category as what you're 

23 

describing as third-party app sharing, and the same analysis is 

24 

to be conducted. 

25 

MS. WEAVER: Yeah, I don't disagree. I think. 
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1 honestly, part of it is a function of timing. 

2 We filed this case. It was about Cambridge Analytica and 

3 apps. And then this other story broke. And if you'll recall, 

4 complaints were filed, and we said, "No, this is actually 

5 related. It's all about third-party data," and we brought it 

6 in. And we have a different body of information about business 

7 partners and apps. 

8 And so the truth is, we don't know exactly. I mean, we 

9 know that Facebook makes some facial argument that it was 

10 device makers in the beginning and that that was how they were 

11 accessing. But there's a lot that remains unknown, beyond the 

12 fact that we know, for example, a New York attorney general is 

13 now investigating Facebook, focusing specifically on the issue 

14 of business partners. 

15 So, you know, I think in some broad sense you are right. 

16 What we have alleged. 

17 THE COURT: So it sounds like -- I mean, it almost 

18 sounds like what you're saying is that there was this second 

19 New York Times article which did not reflect a proper 

20 understanding of what was happening, and you sued on that 

21 New York Times article that didn't reflect a proper 

22 understanding of what was happening. 

23 MS. WEAVER: You sound like Mr. Snyder. No, that's 

24 not true. I mean, let's start at this premise. 

25 THE COURT: Don't ever say that to me again. 
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MS. WEAVER: I'm SO sorry. 

MR. SNYDER: Oh, God. You hurt my feelings. 

MS. WEAVER: We've retained experts. We've analyzed 
how the -- 

THE COURT: It sounds like The New York Times article 
sort of categorized them -- put them in two separate buckets 
and you just adopted that for the purpose of drafting your 
Complaint, but it's wrong. 

MS. WEAVER: That'S not true. 

So what I would just say there is, our understanding is 
there are technical differences. So the early apps got -- 
obtained the data through Graph API Version l.O. That was then 
turned off at one point and turned into Graph API Version 2.0. 
And then, at some point in time, these apps developed their own 
APIs. 

It's just a way to access data. And frankly, our first 
Complaint had a lot more detail about this, but it seemed very 
confusing, and so we took some of that out to clean it up here 
and keep it at a high level. 

At a high level, what is happening is sharing without user 
consent, without disclosure. And that's where we are. So -- 

MR. LOESER: Well, and I just think from a disclosure 
point. Your Honor, there is a distinction, as you've noted, 
between device manufacturers and these other businesses. And I 
don't think you can read the disclosures that they provided 
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1 about service providers and vendors and the like and have 

2 that -- and say that it's not a plausible interpretation to say 

3 that what they did exceeded that; that these business partners, 

4 however you want to describe them, whatever they are, don't fit 

5 the categories that they've described. 

6 THE COURT: Well, I think that -- I think that that is 

7 true, but -- so you look at this list of business partners, and 

8 you say, well, this disclosure about service providers -- 

9 right? -- seems quite a bit narrower than the list of business 

10 partners that you've included in the Complaint. 

11 But the problem is, we now have established that many of 

12 these companies that you list as business partners obtained my 

13 data as third-party apps through my friends. 

14 MS. WEAVER: But they're not apps -- 

15 MR. LOESER: Frankly, Your Honor -- 

16 MS. WEAVER: -- if I may. 

17 MR. LOESER: -- that may be true for some, and it may 

18 not be true for others. 

19 I think that it's important to consider that this idea 

20 that these business partners are just apps is a new idea from 

21 Mr. Snyder. 

22 The fact of the matter is, they had different disclosures. 

23 And previously, they talked about disclosures with regard to 

24 apps, and then they pointed you to these disclosures with 

25 regard to service providers as a different disclosure. Not the 
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app disclosure. That was not what applied here. 

They said, "No, no. Your Honor. What applies are these 
disclosures regarding service providers and vendors." And they 
said, "Those are the disclosures that we want you to evaluate 
when deciding that we did, in fact, give people information 
that would indicate that content and information was shared 
with these entities that we're referring to as business 
partners." 

THE COURT: So maybe what I need to look at to have a 
better understanding of this is -- you're saying, well, 

Mr. Snyder is now calling them apps, but there is a -- it looks 
like you have cited in your Complaint a letter from Facebook to 
the Energy and Commerce Committee, sort of talking about these 
business partners, and I should go read that letter to develop 
a better understanding of -- 

MR. LOESER: Right. 

THE COURT: -- the business partners. 

MS. WEAVER: If I may, just to correct the record, so 
business partners are not apps. If you look at the list at 
484, Acer is not an app; Samsung is not an app. The examples 
that we were looking at as well, Yandex is a Russian search 
engine; it's not an app. Amazon has an app. 

THE COURT: But if you -- 

MS. WEAVER: But app developers -- 

THE COURT: But I assume that if you -- Yandex, the 
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1 

Russian search engine, I assume -- I mean, again, it's hard -- 

2 

MS. WEAVER: So -- SO -- 

3 

THE COURT: -- to understand from the allegations, but 

4 

I assume that the idea is, you use the Russian search engine 

5 

through Facebook, and so it's an app that you're using -- 

6 

MS. WEAVER: I don't -- 

7 

THE COURT: -- on Facebook. 

8 

MS. WEAVER: I don't know that that's true. 

9 

Your Honor. And, in fact, if you read our allegations, from 

10 

488 through 4- -- we move into the whitelisting, but at 493, 

11 

just for the business partners, they are giving business 

12 

partners special access to Facebook identifiers, including, for 

13 

example, at 48- -- give me a moment here. 

14 

If you look at 496, for example, we start talking about 

15 

whitelisted companies who are apps. 

16 

THE COURT: Well, before we get to -- 

17 

MS. WEAVER: Okay. Fine. 

18 

THE COURT: I want to not get bogged down in 

19 

whitelisted apps. I want to understand -- 

20 

MS. WEAVER: Fine. 

21 

THE COURT: -- first, the distinction between business 

22 

partners and apps. 

23 

MS. WEAVER: Right. And what I can say is, a business 

24 

partner -- so it's not apps. It's app developers. Right? 

25 

So Cambridge Analytica and that sort of -- that first 
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1 category is about app developers. Business partners are app 

2 partners who are, among other things, advertising on the site. 

3 And so if you look, there are allegations at 

4 paragraph 710, where we have e-mails from Mr. CEO Zuckerberg 

5 talking about developing relationships with business partners. 

6 And what he's talking about, some of those are apps and some of 

7 them are not. And those relationships, some of them were 

8 bartering, and some of them are allowing offset for advertising 

9 costs with these businesses. 

10 So we don't have the agreements. They haven't been 

11 public. But I guess I would say that these are businesses who 

12 may have apps but they are not app developers. 

13 The agreements that Facebook had with the app developers 

14 was a barter transaction where they gave access to user content 

15 and data so app developers could develop an app. 

16 THE COURT: But the thing I'm struggling with is, 

17 you're drawing that distinction; but in looking at Facebook's 

18 disclosures -- 

19 MS. WEAVER: Right. 

20 THE COURT: Right? 

21 -- what Facebook says is that if your friend interacts 

22 with an app, the app can get all -- I mean, it doesn't say it 

23 this clearly but -- the app can get all of your information -- 

24 right? -- unless you change your app settings. 


25 


MS. WEAVER: Right. 
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THE COURT: And SO -- 

MS. WEAVER: Those app settings didn't apply to 
business partners. 

THE COURT: Okay. Where does the Complaint explain 
that, that those app settings did not apply to business 
partners? 

MS. WEAVER: Yeah. That'S 710? 

MS. LAUFENBER6: 602. 

MS. WEAVER: 602. 

THE COURT: Paragraph 602? 

MS. WEAVER: Yes. That'S page 229. 

THE COURT: And is there anything that you -- I mean, 
I'm not saying that you necessarily have to, but I'm just 
curious for helping -- in terms of helping me understand it. 

Is there anything that you cite for that? You have a lot of 
citations to reports and articles and -- 
MS. WEAVER: Right. 

THE COURT: -- letters and things like that. 

MS. WEAVER: Right. 

THE COURT: Do you cite anything in your Complaint for 

that? 

MS. WEAVER: Sure. I mean, we have --we cite 
extensively the DCMS report, which is the body of the U.K. 
House. And the report -- is it -- 


25 


MS. LAUFENBERG: 710. 
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1 

MS. WEAVER: Paragraph 710. 

2 

THE COURT : Okay. 

3 

MS. LAUFENBERG: (C). 

4 

MS. WEAVER: "The fact that Apps including 

5 

Whitelisted Apps and Business Partners 'were able to 

6 

circumvent users' privacy of platform settings and 

7 

access friends' information, even when the user 

8 

disabled the Platform,' is 'an example of Facebook's 

9 

business model driving privacy violations.'" 

10 

This is from the report itself. 

11 

THE COURT: Okay. I will admit that I have not read 

12 

that report yet. Okay. 

13 

MS. WEAVER: There are a few out there. 

14 

THE COURT : Okay. 

15 

MS. WEAVER: So if you're ready to talk about 

16 

whitelisted apps, then the difference there gets even more 

17 

confusing because, here, Facebook has told users "We are 

18 

cutting off app access"; and then, if you look at 

19 

paragraph 497, the DCMS committee says that this whitelisting 

20 

was driven primarily by revenue and economics. 

21 

And it is supported by other e-mails, which we cite, which 

22 

have come out, basically saying Facebook was giving 

23 

preferential treatment to companies that it should have 

24 

rightfully been cutting off. And these included Lyft, Airbnb, 

25 

and Netflix. So -- 
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1 

THE COURT: You mean should have been cutting off -- 

2 

so, in other words, this was in 2015 when Facebook said, "We're 

3 

going to stop allowing third-party apps to grab your 

4 

information through your friends," and they identified a date 

5 

by which they would do that. And there's this subset of apps 

6 

that you're calling whitelisted apps that continue to have the 

7 

ability to grab my information through my friends. 

8 

MS. WEAVER: And -- yes, exactly. And the app 

9 

controls were cut off so users couldn't change that. That, 

10 

Your Honor, is at 499. 

11 

THE COURT: The what were cut off? Sorry? 

12 

MS. WEAVER: Sorry. The app settings were cut off. 

13 

So at this point, they didn't exist on the platform for users 

14 

to cut off apps. 

15 

THE COURT: Okay. Where is that? 

16 

MS. WEAVER: I'll get that to you in a second. 

17 

But if you look at paragraph 499, there is your date. 

18 

"... failed to state that tens of companies were 

19 

given special whitelist access beyond May 2015." 

20 

And then what later comes out, you know, there's another 

21 

report at paragraph 502 that Facebook is striking deals with 

22 

RBC, Nissan Motor Company, et cetera. 

23 

And so they are continuing -- and I have to be honest. 

24 

You're right. At some point, when are these business partners 

25 

and when are these whitelisted apps? I don't know. I take 
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1 

your point well that maybe it doesn't matter to some extent. 

2 

because these are all adhering to the same theme, that these 

3 

are in violation of, what we would say, users' reasonable 

4 

expectations that their privacy controls could prevent this 

5 

kind of sharing and that their publishing controls, for 

6 

example, would prevent that kind of sharing. 

7 

THE COURT: Okay. So what about -- 

8 

MS. WEAVER: Paragraph 375 is the app setting removal 

9 

in 2015. 

10 

THE COURT: Sorry. What? 

11 

MS. WEAVER: Paragraph 375 answers your question about 

12 

the removal of the app settings, the ability to turn off apps. 

13 

MR. LOESER: So, Your Honor, why don't we jump to 

14 

third-party apps because Mr. Snyder spent a good deal of time 

15 

trying to explain to you why the disclosures regarding 

16 

third-party apps meant that everything that happened here that 

17 

was bad was consented to by Facebook users. And I think he's 

18 

wildly wrong in that regard. 

19 

THE COURT: I'll let you get to that, but just, I want 

20 

to read that paragraph that Ms. Weaver pointed me to. 

21 

Was it 375? 

22 

MS. WEAVER: Yes. 

23 

MS. LAUFENBERG: Correct. 

24 

MS. WEAVER: SO: 

25 

"The 'Apps others use' control panel" -- 
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THE COURT: All right. Let me just read it. 

MS. WEAVER : Sure. 

THE COURT : Okay. 

MS. WEAVER: And paragraph 600 reiterates that. 

MS. LAUFENBERG: And 601 as well. 

MS. WEAVER: Again, citing the DCMS report. 

THE COURT: Okay. All right. Thank you. 

Go ahead. 

MR. LOESER: Okay. So here's the deal. Facebook 
creates a platform that they say provides everybody with 
everything they need to know to control what happens to their 
information. They say that a lot. You control exactly what 
happens to your information. 

And the DCMS report, which Ms. Weaver just mentioned, 
after their exhaustive study, determined there's very little 
the user can do to prevent their information from being 
accessed. And Cambridge Analytica is a good example of users 
were told you can indicate what your privacy wishes are by 
using your privacy settings. You set to friends only, and, lo 
and behold, Cambridge Analytica gets the information. 

So where, I think, their argument falls apart is when you 
look at paragraph 596 through 598, which we have on Slide 38 
here for just ease of reference, and that's this "only in 
connection with your friends" language. 

So the very same disclosure that Mr. Snyder put up and 
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tried to explain to you "This is it. This tells you everything 
you need to know," if you go down in that disclosure, there's 
the rest of the paragraph. And that paragraph says (reading): 

"If your friend grants specific permission to the 
application or website, it will generally only be able 
to access content and information about you that your 
friend can access. In addition, it will only be 
allowed to use the content and information in 
connection with that friend." 

And they have further explanation of what that means. 

They say (reading): 

"For example, if a friend gives an application 
access to a photo you only shared with your friends, 
that application could allow your friend to view or 
print the photo, but it cannot show that photo to 
anyone else." 

And that language changed a bit. And it's another issue, 
hopefully on summary judgment or at trial, when we're going 
through the data policy, which we don't think is a contract, 
we'll see the different ways that they said this. But they 
always had this restriction that it would only be used with 
your friends. 

Now - - 

THE COURT: I wanted to go back and look at the 
provision that you just read me about photographs. 
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1 

MR. LOESER: Yeah. 

2 

THE COURT: That they cannot share that with anybody 

3 

else. Where is that? 

4 

MS. WEAVER: Paragraphs 596 and 597. 

5 

THE COURT: No. I want to look at the actual 

6 

disclosure language. 

7 

MS. WEAVER: Oh, I'm sorry. 

8 

THE COURT: Can we use Exhibit 45? That's what we've 

9 

been using. 

10 

MS. LAUFENBERG: Exhibit 40. 

11 

THE COURT: Exhibit 40. So that's the -- 

12 

MR. SAMRA: 43. 

13 

MS. LAUFENBERG: 43. 

14 

THE COURT: Oh, sorry. 43. So September 7th, 2011. 

15 

And where is this? On, like, page -- 

16 

What page of that exhibit? 

17 

MS. WEAVER: I thought it was page 9. Is that right? 

18 

9 or 10. 

19 

MS. LAUFENBERG: 10, I think. 

20 

THE COURT: Exhibit 43 or 45? 

21 

MR. SAMRA: Your Honor, I have page 5 on Exhibit 43. 

22 

THE COURT: Page 5 on Exhibit 43. Okay. 

23 

"Controlling what is shared when the people you 

24 

share with use applications." 

25 

MS. WEAVER: Right. And if you go to the last 
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1 

paragraph there, that's where the language is. 

2 

"... the application will be allowed to use that 

3 

information only in connection" -- 

4 

THE COURT: Right. But where's the language that 

5 

Mr. Loeser was reading to me about -- 

6 

Is it "LOE Ser" or "LAW Ser"? 

7 

MR. LOESER: "LOE Sher." 

8 

THE COURT: Loeser. Sorry about that. 

9 

MR. LOESER: There'S so many ways to say it wrong, and 

10 

either one of those are preferable to the other one. 

11 

THE COURT: Mr. Loeser was reading to me some language 

12 

about sharing pictures, sharing photos. Where is that? 

13 

MR. LOESER: The language is very clearly stated in my 

14 

outline. 

15 

MS. WEAVER: But he said paragraphs 596 to 597. 

16 

MR. LOESER: Yeah, but I don't see it in 596. 

17 

MS. LAUFENBERG: I think it's Exhibit 40, Josh. 

18 

That' s what I have. 

19 

MS. WEAVER: What? Exhibit 40? 

20 

(Co-counsel confer.) 

21 

MS. WEAVER: So give us just a moment. Your Honor. 

22 

Sorry. 

23 

(Co-counsel confer.) 

24 

MS. LAUFENBERG: Page 4 of Exhibit 40. 

25 

MR. LOESER: Okay. We found it. 
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THE COURT: "For example, if a friend gives an 
application access to a photo you only shared with 
your friends, that application could allow your friend 
to view or print the photo, but it cannot show that 
photo to anyone else." 

Okay. 

MR. LOESER: Okay. So this is an important 
disclosure. 

And Your Honor raised the possibility and there was 
another question about whether this was a technological 
limitation or something else. And frankly, I don't think it 
matters what it is and if there are multiple interpretations, 
because as you noted, what matters for a motion to dismiss is, 
is the plaintiffs' interpretation a plausible one? 

Mr. Snyder may have a different interpretation. And I'm 
not even sure what's better, if it's a technological limitation 
or merely authority. But the fact of the matter is, the 
allegation in the Complaint and the plaintiffs' reasonable 
interpretation of that provision is entitled to be credited. 

And on a motion to dismiss, it's a plausible one. So that's -- 
THE COURT: But the interpretation that you have put 
forward is that this disclosure implies that Facebook is 
actually doing something to limit the way third-party apps can 
use this data; and, in fact, Facebook is not doing anything to 
limit the way that third-party apps are using this data; and so 
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1 

the disclosure is inaccurate in that sense. That's what you've 

2 

put forward. 

3 

MR. LOESER: Correct. And that, again, if you look at 

4 

the language and put yourself in the shoes of a Facebook user. 

5 

when they read a statement that the information that their 

6 

friend gives about them will only be used in regard with that 

7 

friend, that seems like a plausible interpretation. It's kind 

8 

of, it means exactly what it says. 

9 

Now - - 

10 

THE COURT: Well, but -- and their response to that 

11 

is, "Well, those were, in fact, the restrictions we imposed on 

12 

third-party apps." 

13 

And you say, "But they didn't enforce those restrictions." 

14 

Or do you say, "No, they actually didn't impose those 

15 

restrictions, in the first place, on third-party apps"? 

16 

MS. WEAVER: So, first, with the first category, app 

17 

developers like Cambridge Analytica, there are plenty of 

18 

allegations in this Complaint, largely from -- 

19 

THE COURT: Well, they didn't share the information 

20 

with Cambridge Analytica. 

21 

MS. WEAVER: No. They shared it with Kogan. That's 

22 

right. But they didn't audit -- 

23 

THE COURT: So are you saying app developers like 

24 

Kogan? 

25 

MS. WEAVER: Yes. 
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1 

THE COURT : Okay. 

2 

MS. WEAVER: Kogan was an app developer, and they 

3 

didn't audit any of these. The DCMS report said they didn't 

4 

find one instance -- 

5 

THE COURT: I understand your argument that they 

6 

didn't audit; that, basically, they said, to use an analogy 

7 

that my law clerk gave me this morning, they said that the 

8 

curfew is 10 o'clock, but they never checked to see if anybody 

9 

was home at 10 o'clock. 

10 

MS. WEAVER: Not a bad analogy. 

11 

THE COURT: But what I'm asking is: Do you agree that 

12 

the curfew existed? Even if it wasn't enforced, do you agree 

13 

that the curfew existed, or do you allege that there never was 

14 

a curfew to begin with? 

15 

MS. WEAVER: So here's where it gets complicated. If 

16 

you're talking about allowing, just the rule -- and let's set 

17 

aside that the definition of "allow" may mean "to restrain or 

18 

not permit," which is a -- but let's set that aside. Let's 

19 

take their interpretation. "Allowing" means we had a rule that 

20 

we didn't enforce. 

21 

Yes, I mean, I think that they said that there was a rule. 

22 

I think that they didn't enforce it. 

23 

THE COURT: And by saying "allowed," in context, it 

24 

contains with it an implication that they're going to do 

25 

something -- 
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1 

MS. WEAVER: Right. 

2 

THE COURT: -- to enforce the curfew. 

3 

MS. WEAVER: Right. 

4 

THE COURT: I understand that argument. 

5 

MS. WEAVER: Hang on. 

6 

THE COURT: I understand that argument. I'm just 

7 

asking, like, do you agree with -- because what they say is: 

8 

We did, in fact, impose a curfew. They may not have followed 

9 

the curfew, but we did, in fact, impose a curfew, however 

10 

toothless. 

11 

Do you agree that -- do you accept that they imposed a 

12 

curfew? 

13 

MS. WEAVER: So -- 

14 

THE COURT: Because I couldn't find anything in the 

15 

papers to suggest -- to indicate that they actually did impose 

16 

a curfew. In other words -- 

17 

MS. WEAVER: Oh, there -- 

18 

THE COURT: -- I couldn't find anything in the papers. 

19 

Like, we don't have their agreements with the third-party 

20 

apps; right? And so they say, "We had a policy restricting 

21 

third-party use of this data," and they point to something in 

22 

the Data Use Policy that doesn't seem to say that. 

23 

And so I'm trying to understand if you -- are you alleging 

24 

that they had no curfew, or are you merely alleging that they 

25 

had a curfew that was toothless? 
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1 

MS. WEAVER: Both. 

2 

THE COURT: Okay. Where -- 

3 

MS. WEAVER: So -- 

4 

THE COURT: -- do you allege that they had -- 

5 

MS. WEAVER: So -- 

6 

THE COURT: --no curfew? 

7 

MS. WEAVER: Right. So the whitelisted apps had no 

8 

curfew. 

9 

THE COURT: I'm talking about regular third-party -- 

10 

MS. WEAVER : Okay. 

11 

THE COURT: -- apps. 

12 

MS. WEAVER: But I don't want to let that go because 

13 

that is a huge violation. 

14 

THE COURT: I get that. 

15 

MS. WEAVER: Business partners had no curfew. 

16 

THE COURT: I get that. 

17 

MS. WEAVER: So then we come to this point that we 

18 

discussed in the last hearing which is the metadata stripping. 

19 

They are saying -- 

20 

THE COURT: Let's hold on. 

21 

MS. WEAVER: Well, because it disabled the ability of 

22 

the app developers to comply with user privacy settings. 

23 

THE COURT: But I don't understand your metadata 

24 

stripping -- 

25 

MS. WEAVER : Okay. 
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1 

THE COURT: -- allegations at all; so I would like to 

2 

put those -- 

3 

MS. WEAVER: Fine. 

4 

THE COURT: -- aside for a second and just try to get 

5 

an answer to my question. 

6 

Do you allege in this Complaint that Facebook told users 

7 

in its app settings they're only allowed to use your 

8 

information in connection with your friends but that, in fact. 

9 

Facebook did not impose that restriction? That there was -- 

10 

MR. LOESER: Yes. 

11 

THE COURT: --no such curfew; there was no such 

12 

restriction? 

13 

MR. LOESER: Cambridge Analytica is the best example 

14 

of it, and it makes sense to start with that since that's where 

15 

the case started. 

16 

But Kogan got the information. 300,000 people downloaded 

17 

the app. And from that, he parleyed that into 87 million 

18 

people. 

19 

THE COURT: And you're saying -- here's what I'm 

20 

asking. 

21 

MR. LOESER: Yeah. 

22 

THE COURT: Are you alleging that he had permission to 

23 

do that or that he was not told that he could not do that? 

24 

Because they say -- 

25 

MR. LOESER: Yeah, I understand what you're saying. 
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THE COURT: They say, "We told Kogan, we told these 
other third-party apps that they're not allowed to do that." 

MR. LOESER: Right. 

THE COURT: Right? 

And we have a separate discussion of whether that curfew 
had any teeth. But -- 

MR. LOESER: Right. 

THE COURT: -- did they say, "We told Kogan, we told 
the other third-party apps they're not allowed to do that with 
your data"? 

And I don't see anything that proves -- or I don't see any 
evidence that they, in fact, told Kogan and other third-party 
apps "You're not allowed to do that with the data." And so I'm 
wondering what your position is on that. 

MR. LOESER: I think the best way to put it. 

Your Honor, is that we are evaluating these disclosures to 
decide if a user had a reasonable expectation of privacy or a 
reasonable expectation that something would not happen. 

However -- whatever this means in terms of the power that 
an app had to do or not do something, when a user reads that 
disclosure, the reasonable interpretation of the user is 
something was not going to happen. And that thing that was not 
going to happen was that information was not going to be used 
for purposes other than in connection with their friend. So 
it's a thing that they were told was not going to happen that 
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1 

did happen. 

2 

Now, I don't -- 

3 

MS. WEAVER: Kogan -- 

4 

MR. LOESER: I don't really know if that means -- I 

5 

don't know, did Facebook tell Kogan "You're not supposed to use 

6 

this information for persons other than friends"? I don't know 

7 

if they said that or not. We'd have to look at the agreement 

8 

between Facebook and Kogan. 

9 

But from the standpoint of these plaintiffs and the value 

10 

and relevance of this disclosure, it's that they were told 

11 

something was not going to happen and that's exactly what 

12 

happened. 

13 

Now, Facebook, in their brief, talks about -- draws a 

14 

somewhat different distinction here. 

15 

THE COURT: Well, but don't you think there's a 

16 

difference between, like -- okay. One scenario is that 

17 

Facebook doesn't say anything to the third-party apps about -- 

18 

in an effort to limit their use of the data. That's one 

19 

scenario. 

20 

The second scenario is Facebook tells the third-party 

21 

apps, in its contracts or whatever, "You're not allowed to use 

22 

third-party data except in connection with friends." 

23 

MR. LOESER: Right. 

24 

THE COURT: And then the third scenario -- oh, and 

25 

then in that second scenario, Facebook does nothing to enforce 
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that. 

MR. LOESER: Which is true. So we can put that aside 
because that happened. 

THE COURT: And then the third scenario is that 
Facebook tells people that they can only use data in connection 
with their friends and then does something to enforce that, 
Facebook being the -- 

MR. LOESER: Right. 

THE COURT: -- behemoth that it is. 

And so it seems to me that all three of those scenarios 
are different, and I'm trying to figure out whether you're 
alleging the first scenario. 

MS. WEAVER: So what we allege, actually, at pages 537 
through 539 -- 

MS. LAUFENBERG: Paragraphs. 

MS. WEAVER: Paragraphs. Sorry. 

-- is that, in fact, Facebook -- 

THE COURT: Sorry. What? 537 and -- 

MS. WEAVER: To 539. 

So there were a number of, sort of, Cambridge Analytica 
whistleblowers. Right? And Sandy Parakilas is one of them. 

And he has stated and been interviewed by various 
regulatory agencies. He has testified. 

THE COURT: This is the "better not to know" quote? 

MS. WEAVER: Yes, exactly. 
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1 

But what he's reporting is violation of the Data Use 

2 

Policy and specifically what you're asking about and, also, at 

3 

paragraph 470. 

4 

Now, you may or may not find Dr. Kogan credible, but it's 

5 

a disputed fact, at paragraph 470, that he says the ability to 

6 

gather people's Facebook friends' data without their permission 

7 

was a Facebook core feature. 

8 

THE COURT: But where in Facebook's Data Use Policy 

9 

does it say that developers violate the policy if they use it? 

10 

Is it just that same disclosure that we're talking about? 

11 

MS. WEAVER: They do say, at iterative points in time. 

12 

that "App developers will comply with your privacy settings." 

13 

Is that what you're asking? 

14 

THE COURT: Maybe. I don't know. I mean, I couldn't 

15 

find any language that directed app developers to limit their 

16 

use of my data. 

17 

MR. LOESER: Here'S what I'm struggling with. 

18 

Your Honor. I can't figure out which of those three things you 

19 

think is better for the plaintiff. 

20 

THE COURT: Well, the third is the worst. 

21 

MR. LOESER: Because to me, all those roads seem to 

22 

lead to Rome. 

23 

THE COURT: I think the third is bad for you. Right? 

24 

If they said developers are only allowed to do this with your 

25 

data and it were not the case that they did nothing to make 
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sure that that promise was kept but developers went around 
that, I think you would have a tougher claim. 

MR. LOESER: So I'm glad I asked. 

But I think, taking that right there, we know from the 
Cambridge Analytica reporting -- and, again, we don't have 
discovery in this case but -- from reporting, that Facebook did 
nothing to monitor. So we know they didn't do anything. 

And I'm just not sure what difference it makes when you're 
evaluating the disclosure. The fact that they didn't do 
anything means that we probably have a good negligence claim. 

And -- but the disclosure, they're putting that disclosure 
in front of you, saying that based on this disclosure, users 
consented to every single thing that was given to apps. 

And we're saying to you, well, wait a second. We know 
from Cambridge Analytica that this wasn't used just in 
connection with the friends. So the disclosure is an 
inadequate basis on which to find consent. 

And so I think that discovery will enable us to figure out 
which of your three options really apply. And some of those 
options may be better or worse, frankly, for Facebook, 
particularly for a variety of the claims that we've asserted. 

But from the standpoint of the questions you've asked us, 
which is "Let's talk about consent and these disclosures," it 
seems to me that any of those three options don't really make a 
difference, because the fact of the matter is, the disclosure 
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is -- at the very least, you can look at that disclosure and 
say there's different ways of interpreting it. And given that 
and given Ninth Circuit case law -- 

THE COURT: Well, what do you think about -- I mean, 
there was an interpretation that you didn't put forward that I 
asked about, which is whether you could interpret that language 
as imposing some sort of technological restriction on the apps. 
What's your view of that? 

MR. LOESER: Yeah. I guess I have the same view. I'm 
just not sure what difference it makes. If you can -- you can 
parse the language and come to different understandings of what 
it means. 

THE COURT: Well, I think it makes a difference 
because if they're using the word "allowed" in the sense 
that -- I don't know if it makes a difference for this motion, 
but I could see it making a difference at the end of the day, 
because if you interpret "allowed" in the way that they want -- 
that they and, I think, you have interpreted it in your 
papers -- and, in fact, they engaged in meaningful efforts to 
enforce those restrictions but it simply didn't work on 
occasion or simply didn't work sometimes, then I think you 
lose, probably. 

MR. LOESER: Well, we relish that fight, because one 
of the things we learned in discovery, in the limited discovery 
that we got, was they didn't actually evaluate the terms of use 
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1 

of any of the apps, the thousands and thousands of apps. Maybe 

2 

it was physically impossible for them to do so because there 

3 

are so many apps. 

4 

But we know that they didn't monitor what Kogan did, and 

5 

we know that they didn't read these policies that supposedly 

6 

dictated the terms vis-a-vis users and the app. 

7 

So I think we're going to be in a pretty good spot when it 

8 

comes down to trying to sort out, based on discovery, well. 

9 

what did Facebook really do to try and put some teeth into 

10 

these disclosures that it made to people? They create an 

11 

expectation of privacy. They create an expectation of conduct. 

12 

Did they do anything to enforce that? 

13 

And I think that, frankly, it is an issue for another day. 

14 

but I think it's an interesting issue for another day. 

15 

MS. WEAVER: And I would -- 

16 

THE COURT: But do you think that -- it sounds like 

17 

you may not think that that's a plausible interpretation of the 

18 

language, that "We impose technological restrictions on 

19 

third-party apps so that they can only use it in connection 

20 

with your friends." 

21 

MR. LOESER: Frankly, Your Honor, I don't understand 

22 

technology well enough to know if they could or couldn't do 

23 

that. But I can read, and I can try and look at a disclosure 

24 

and say: Does this assure people that something's not going to 

25 

happen? And it seems like it did assure people, whether it was 
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1 

a technological limitation or a permission, whatever it was. 

2 

THE COURT: Yeah, but you seem to be assuming that if 

3 

it happened, then they didn't adequately disclose. I mean. 

4 

even if one out of a thousand app developers misused 

5 

information, that means this disclosure was inadequate. 

6 

MS. WEAVER: The facts that we allege are actually 

7 

very different -- right? -- which is that they -- 

8 

THE COURT: No, I know. 

9 

MS. WEAVER : Okay. 

10 

THE COURT: I know. 

11 

MS. WEAVER: Fine. 

12 

THE COURT: I'm just trying to -- 

13 

MR. LOESER: We have kind of an N of one, which is 

14 

Cambridge Analytica. Maybe it was an extremely unique 

15 

circumstance, which I really don't think so. 

16 

MS. WEAVER: No. There are 400 other apps that they 

17 

discontinued from the cite. 

18 

THE COURT: You guys are now arguing with each other? 

19 

MR. LOESER: Yeah, we're arguing with each other. 

20 

And Ms. Weaver will talk about the Rankwave case, which is 

21 

a case that Mr. Snyder just recently filed against an app 

22 

developer for, kind of looks like, doing what Cambridge 

23 

Analytica or Kogan did, anyway. 

24 

And so it does seem like -- anyway, it's a factual issue. 

25 

It's an interesting question. But I don't think it changes how 
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1 

we interpret these disclosures. 

2 

THE COURT : Okay. 

3 

MR. LOESER: Let me run through a few other things on 

4 

the problem with what they did vis-a-vis apps. And then I do 

5 

want to jump to some of these legal questions that I think it's 

6 

worth giving you some information. 

7 

THE COURT: I want to let people go soon, because 

8 

we've blown through lunchtime. And so, anyway, why don't you 

9 

take another ten minutes. 

10 

MR. LOESER: Okay. Well, I'll quickly deal with 

11 

third-party apps. 

12 

So one of the things that you heard Mr. Snyder say -- and 

13 

he said a lot -- and their briefs say, is that it's really 

14 

clear to people how to control what apps get. 

15 

And I think that it's important to step back again and 

16 

look at what the FTC said in 2011 about how these settings 

17 

operated and how, in the privacy settings -- which people 

18 

naturally believed would determine who could see their 

19 

information, because that's what the settings say -- the 

20 

privacy settings didn't refer to these app settings. 

21 

And it's very easy for Mr. Snyder to say now, in 

22 

hindsight, "That's kind of ridiculous. Of course everyone knew 

23 

you control apps with app settings and privacy with privacy 

24 

settings," but that's exactly what the FTC said was not clear. 

25 

Now, in their brief, they explained -- 
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THE COURT: And then they entered a consent decree, 
and than Facebook changed its disclosures. 

MR. LOESER: I don't think they changed their 
disclosures so much as they supposedly changed their conduct. 
But they didn't. 

So I also think it's important to note that the Statement 
of Rights and Responsibilities indicates -- there's some 
language about how people can control who sees their 
information through their privacy settings and app settings. 

And you've heard an interpretation that "Of course that means 
that you need to do both things." Okay? 

And, again, when we're looking at plausible 
interpretations on a motion to dismiss, maybe that's what 
Mr. Snyder or Facebook thinks is a plausible interpretation, 
but the FTC came to a different conclusion. So there must be 
another plausible interpretation. 

THE COURT: The FTC came to a different conclusion 
about that particular language? 

MR. LOESER: They came to a different conclusion about 
the fact that when you go into the privacy settings and you 
think you're determining who can see your information, you're 
not actually controlling who can see your information because 
there's something else called these app settings. 

Facebook has taken the position -- 

THE COURT: But I thought that that disclosure, I 
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1 

thought that sentence in the terms came after the FTC came down 

2 

on Facebook. Am I misremembering that? I thought that was a 

3 

change in the disclosure language that emanated from the FTC 

4 

proceedings. Am I wrong about that? 

5 

MS. WEAVER: Which language? 

6 

MR. LOESER: The SRR language about you control -- I'm 

7 

not sure. I'll check. 

8 

But I think the point is, when Mr. Snyder looks at that 

9 

language and says the statement that says you control through 

10 

your app settings and your privacy settings, he says to you. 

11 

"Well, that means you" -- and it's very clearly put in their 

12 

brief -- "That tells users you absolutely have to go do both 

13 

things in order to determine who can see your information." 

14 

And all I'll say on that is that if they wanted it to say 

15 

that, they should have written that. "You need to be aware you 

16 

need to set both of these things in order to control who sees 

17 

your information." And that's not, not what they said. 

18 

THE COURT: I'm not sure I buy that argument, but 

19 

okay. What else? What else should we make sure -- 

20 

MS. WEAVER: Your Honor, I'd like to be heard on 

21 

the - - 

22 

THE COURT: --we talk about? 

23 

MS. WEAVER: -- economic harm issue. 

24 

THE COURT: What? 

25 

MS. WEAVER: I would like to be heard on the economic 
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harm issue. 

THE COURT: Okay. Yeah, very briefly. 

MS. WEAVER: Okay. Great. 

The question of whether to recognize a claim for economic 
harm comes down to whether the Court agrees that there must be 
value in the content and some loss by the plaintiffs. 

And is it enough for us to allege -- 

THE COURT: What'S the loss by the plaintiffs? 

MS. WEAVER: Sorry? So the loss -- let me start with 
this, first of all, the value. 

And Mr. Loeser just referenced a complaint. We have a 
copy here for the Court. This was filed on May 10th in 
Santa Clara County by Facebook against Rankwave, which is an 
app. And the Rankwave complaint asserts a breach of contract 
claim and a claim under Section 17200, just as we do here. 

The heart of the claim is that Rankwave took users' 
content generated on Facebook, such as public comments and 
likes -- that's paragraph 22 -- as well as the level of 
interaction other users had with the app users' Facebook 
profile -- that's paragraph 23 -- and then they allege at 
paragraph 25, that the Facebook data associated with Rankwave's 
various apps received a valuation of $9.8 million. 

THE COURT: Okay. But that's -- I mean, the question 
is: What loss did an individual plaintiff experience from this 
data being taken? 
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1 

MS. WEAVER: Right. Well, the first -- the economic 

2 

loss -- 

3 

THE COURT: I view everything you just said to be 

4 

irrelevant to your economic harm theory -- 

5 

MS. WEAVER: So the first -- 

6 

THE COURT: -- because the question is: What loss did 

7 

a plaintiff experience? 

8 

MS. WEAVER: Okay. Then the second thing is that 

9 

plaintiff -- or that Facebook itself describes in its 

10 

disclosures with plaintiffs that their photos and videos could 

11 

constitute intellectual property. And that's the concept here. 

12 

that if plaintiffs -- let me find the -- 

13 

Can we hand up the -- 

14 

MS. LAUFENBERG: Yeah. 

15 

THE COURT: Well, is there any allegation that any 

16 

particular plaintiff had their intellectual property rights 

17 

damaged by these disclosures? 

18 

MS. WEAVER: Well, Your Honor -- 

19 

THE COURT: I don't remember you arguing that in your 

20 

brief. 

21 

MS. WEAVER: It'S true. This is Exhibit 27 to the 

22 

Duffey declaration. And when it says, "The permissions you 

23 

give us" -- 

24 

THE COURT: Okay. I believe you that that's what it 

25 

says. I'm asking, does anybody allege that their intellectual 
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1 

property rights were harmed -- 

2 

MS. WEAVER: What we allege is that content and 

3 

information was taken beyond the scope of the agreement. And 

4 

if some of that content and information is intellectual 

5 

property, you don't have to show a loss, just like a privacy 

6 

harm. And they, themselves, here in this document, call it 

7 

"intellectual property," in the user agreement. This is 

8 

effective April 2018, before we filed suit. 

9 

And so when I have an agreement -- 

10 

THE COURT: Did you argue this in your brief? 

11 

MS. WEAVER: We did not. Your Honor. 

12 

THE COURT: Okay. Anything else you want to make sure 

13 

to discuss in the last five minutes? 

14 

MR. LOESER: Yes. One final thing. Your Honor. Your 

15 

question asked about incorporation by reference, and I do think 

16 

it's worth jumping back to that. 

17 

THE COURT: Yeah. 

18 

MR. LOESER: So specifically, you asked about 

19 

incorporation by reference, and that assumes that the data 

20 

policy becomes part of the contract -- 

21 

THE COURT: Right. 

22 

MR. LOESER: -- this SRR, frankly. 

23 

The other part of that question that you're not asking 

24 

about and I want to make sure you don't want to hear anything 

25 

about is whether the data policy is itself a contract. 
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1 

And we talked about that at some length previously. And I 

2 

think, frankly -- I don't think it is under Nguyen v. Barnes & 

3 

Noble. It just doesn't -- they don't have -- it's not 

4 

conspicuous enough, and they don't use the language of assent 

5 

that's required. 

6 

So that takes us into this realm that you're talking about 

7 

now, which is incorporation by reference. And our brief talks 

8 

about -- identifies a few cases that go through California law 

9 

on this, and that's the Shaw case and the Wollschlaeger case 

10 

and then Anthem II are the cases that -- frankly, that the 

11 

defendants -- 

12 

THE COURT: Right. 

13 

MR. LOESER: -- point to. 

14 

I think that if you look at Shaw, what's clear about 

15 

incorporation by reference is that you have to indicate -- 

16 

THE COURT: That was, like, a university professor who 

17 

had a contract with his employer at UC Davis? 

18 

MR. LOESER: Right, for royalties. And the professor 

19 

was handed a document, that he signed, that said he was 

20 

entitled to, among other things, royalties on patents. And 

21 

then UC Davis tried to get out of that agreement later. 

22 

And what the case stands for is the proposition that if 

23 

you want to incorporate something by reference, it's not just a 

24 

matter of referring to it. You also have to provide some 

25 

indication of assent. There has to be some indication that 
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1 

your purpose in referring to that document is to make it part 

2 

of the contract. 

3 

THE COURT: So what are your best cases on the idea 

4 

that the Data Use Policy is not incorporated by reference? 

5 

MR. LOESER: I think, frankly, the best case is -- 

6 

frankly, it's Shaw. It's cases that found incorporation by 

7 

reference because they so clearly indicate in Wollschlaeger as 

8 

well and Amtower v. Photon Dynamics , which is 158 Cal.App.4th 

9 

1582, 2008 -- that's a case that interprets Wollschlaeger and 

10 

provides what is a rational explanation of what it means. 

11 

THE COURT: What is that case called again? 

12 

MR. LOESER: Amtower v. Photon Dynamics, Inc. 

13 

But the principal, I think, is what really matters. And 

14 

that's: Did the party provide some indication that they 

15 

intended for this document to become part of a contract? 

16 

You can't just refer to the document. You have to provide 

17 

some indication that you intended for it to be part of a 

18 

contract. 

19 

So if you look at the language that Facebook actually uses 

20 

here, which I have on Slide 20, which I believe is the 

21 

Complaint at 243 and 244 -- and this is in 2009 -- this 

22 

language existed from 2009 through 2018. And it's 

23 

paragraphs 651 through 652. 

24 

THE COURT: Right. 

25 

MR. LOESER: And this is in the Statement of Rights 
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and Responsibilities, which is the contract between the 
parties. It says -- and we have a blowout here on the slide 
(reading): 

"Your privacy is very important to us. We 
designed our data policy to make important disclosures 
about how you can use Facebook to share with others 
and how we collect and use your content and 
information. We encourage you to read the Data Use 
Policy and use it to help you make informed 
decisions." 

So there's none of the language of assent, where they've 
made it clear to them -- they say, "We encourage you to read 
it." There's nothing in here that says, "And we make this part 
of our contract." 

Now, if you look at the current terms, I think they 
provide a good indication of what you would need to have in 
order to actually provide this language of assent. And that's 
Slide 21, which refers to paragraph 656 in the Complaint. They 
have this nice bold disclosure now -- and this is, of course, 
post Cambridge Analytica -- which states: 

"Our Data Policy and Your Privacy Choices. To 
provide these services, we must collect and use your 
personal data. We detail our practices in the Data 
Policy, which you must agree to in order to use our 
Products." 
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1 

So that is language of assent. And they made it clear. 

2 

starting in April nineteen- -- 2018, that they intended this 

3 

document to be part of the contract. 

4 

So that, in a nutshell. Your Honor, is why we don't 

5 

believe that the data policy is incorporated by reference into 

6 

the contract. 

7 

THE COURT: Okay. Let me make sure I don't have any 

8 

other questions for you. 

9 

So like I said, just submit a letter listing cases. No 

10 

argument. No parentheticals. Just the cases you want me to 

11 

read on the issue of subsequent changes to the terms of -- to 

12 

the contract, to the terms of service, and I will read them. 

13 

Okay. Mr. Snyder, do you want to take five to seven 

14 

minutes to -- 

15 

MR. SNYDER: Yes. May I just take a one-minute 

16 

restroom break? 

17 

THE COURT: Oh. Yeah, sure. 

18 

MR. SNYDER: Sorry. Thank you. 

19 

THE CLERK: Court is in recess. 

20 

(Recess taken at 1:28 p.m.) 

21 

(Proceedings resumed at 1:31 p.m.) 

22 

MR. SNYDER : Thank you, Judge. 

23 

THE COURT: We definitely have to let people go. 

24 

So -- 

25 

MR. SNYDER: Yes. 





PROCEEDINGS 


129 


1 

THE COURT: -- really, just five, seven minutes. 

2 

MR. SNYDER: Yes, Your Honor. 

3 

THE COURT: Whatever you think is the most important 

4 

thing to respond to. 

5 

MR. SNYDER: Yes, Your Honor. I'll briefly respond to 

6 

the contract point, the business partners point, the curfew 

7 

point. 

8 

THE COURT : Okay. 

9 

MR. SNYDER: On the contract point, this is not. 

10 

Your Honor, respectfully, a hybrid contract-disclosure matter. 

11 

This is a pure contract interpretation question. And the 

12 

canons of construction tell us that we do not need experts. We 

13 

don't need -- this is not a food label case, because that's not 

14 

a contract. That's something very different, different bucket 

15 

of legal analysis. 

16 

THE COURT: But there's this reasonable -- 

17 

MR. SNYDER: Yes. 

18 

THE COURT: -- Facebook user standard. 

19 

MR. SNYDER: For sure. Like any contract 

20 

interpretation, what would be the reasonable reading of a 

21 

contract and what is a plausible reading? There's no ambiguity 

22 

here. You only need parol evidence when there's ambiguity. 

23 

(Court reporter interrupts for clarification.) 

24 

THE COURT: P-a-r-o-1. 

25 

MR. SNYDER: Sorry. And so, as I said repeatedly, the 
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1 

privacy settings, the app settings, and all the other policies 

2 

are clear and robust and can be interpreted and should be 

3 

interpreted as a matter of law, as provided in the consent and 

4 

disclosures required. 

5 

On the business partners, it's frustrating. Your Honor. 

6 

The reason I stood up multiple times is -- and, unfortunately. 

7 

this infects a lot of the plaintiffs' argument. It's either 

8 

guesswork or just contrary to either their own pleading or, in 

9 

this case, their own exhibits. 

10 

The reason Your Honor granted pre-motion discovery many 

11 

moons ago is because the plaintiffs wanted that question 

12 

answered. What did we tell our app developers? 

13 

And not only was there a curfew, but the plaintiffs cited 

14 

the curfew in their submissions. That's Exhibit 25. 

15 

And on Exhibit 25, there is a provision, which we provided 

16 

to them in discovery and which they submitted to Your Honor, 

17 

which makes this frustrating because -- 

18 

(Co-counsel confer.) 

19 

MR. SNYDER: Oh, this is the SSR. 

20 

And it says, "Special Provisions Applicable to 

21 

Developers/Operators of Applications and Websites." 

22 

In a nutshell -- 

23 

THE COURT: Wait. Hold on. Hold on. Hold on. Let 

24 

me go there. 

25 

MR. SNYDER: Yeah. 
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1 

THE COURT: Okay. All right. 

2 

MR. SNYDER: And this is -- 

3 

THE COURT: This is from -- let's see. This is the 

4 

SSR from November 15th, 2013; is that right? 

5 

MR. SNYDER: It seems that way. Your Honor. 

6 

THE COURT : Okay. 

7 

MR. SNYDER: But essentially, this made clear that we 

8 

have a separate set of rules of the road for our app 

9 

developers, called "Facebook Platform Policies"; and those. 

10 

among other things, prohibit the Kogans of the world from 

11 

selling data. And so there was a clear curfew. 

12 

THE COURT: Where is the curfew? What's the language 

13 

that reflects the curfew? This is "Special Provisions 

14 

Applicable to Developers/Operators of Applications and 

15 

Websites." 

16 

MR. SNYDER: Right. And basically, it says to a 

17 

developer: 

18 

"You will not use" -- Number 3 -- "display. 

19 

share, or transfer a user's data in a manner 

20 

inconsistent with your privacy policy." 

21 

And - - 

22 

THE COURT: With "your" privacy policy? 

23 

MR. SNYDER: Right. This is a developer. 

24 

THE COURT: So, "Developer" -- 

25 

MR. SNYDER: Correct. 
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1 

THE COURT: -- "you have to have a privacy policy, and 

2 

you will not use, display, share, or transfer a user's data in 

3 

a manner inconsistent with" -- 

4 

MR. SNYDER: Correct. 

5 

THE COURT: -- "your privacy policy." 

6 

MR. SNYDER: Right. 

7 

THE COURT: And SO does Facebook dictate to the 

8 

developers what their privacy policies are? 

9 

MR. SNYDER: Yes. It'S in the Facebook Platform 

10 

Policies, which are hyperlinked in this document. And it makes 

11 

clear that Kogan was not permitted to sell the data to 

12 

Cambridge Analytica and did so in violation of Facebook's 

13 

Platform Policies. 

14 

So there was a curfew. 

15 

On the question of whether -- 

16 

THE COURT: That'S the thing, is I was looking -- 

17 

MR. SNYDER: Paragraph 7: 

18 

"You will not sell user data. If you are 

19 

acquired by or merge with a third party, you can 

20 

continue to use user data . . . ." 

21 

THE COURT: Yeah, but I'm asking about this 

22 

limitation: You will only use user data -- that third-party 

23 

apps will only -- can only -- are only allowed to use your data 

24 

in connection with your friends. 

25 

And so I'm looking in this -- I've been looking in this 
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paragraph 9, because it's what you cited to -- 

MR. SNYDER: Yes. 

THE COURT: -- for an indication that third-party apps 
are only allowed to use my information in connection with my 
friends, and I couldn't find that from this paragraph. 

MR. SNYDER: That'S because we don't have the platform 
policies in front of us. I'm using this as a shortcut. 

Your Honor, because I have limited time, to answer the 
question: Was there a curfew? 

And the curfew Your Honor referred to was: Did we tell 
third-party apps that they couldn't sell and/or transfer data? 
And we did. 

THE COURT: And I guess all I'm saying is, it seems 
like from what has been submitted to me, it's not clear that 
there even was a curfew. But they are not contesting the 
notion that there was a curfew, however toothless. So it seems 
to me that it's not an issue for me to grapple with. 

MR. SNYDER: Paragraph 6, just for the record, says: 

"You will not directly or indirectly transfer any 
data you receive from us to (or use such data in 
connection with) . . . ." 

So we believe that the curfew was clear. 

And I would just take issue with the "toothless" point. 
While the company has said publicly that it could have and 
should have done more, the fact is, the company, a day late. 
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took action, contacted the relevant parties, sought 
certifications. And this lawsuit that we filed, obviously, is 
further enforcement evidence. 

As to business partners. Your Honor, again, very 
frustrating because they cite to a bunch of paragraphs where 
they engage in speculation without any factual support, but 
what is binding on them is their admission in paragraph 4 or 8 
of the Complaint which makes clear that, whether it's private 
APIs or public APIs, there was no use of data by any of these 
so-called partners in excess of or in contravention of user 
settings designated by Facebook users. 

App settings were never shut off. There's no evidence. 
There's no factual support. To the extent that that's alleged, 
it's wrong. And it's based on -- it's a conclusory allegation. 
And their own Complaint contradicts it, because it says in 408 
that app developers only gained access with permission from the 
app user, which is the dispositive point here. Whether it's a 
whitelisted app, a so-called private API, or otherwise, one, 
never in excess of user permission; two, never was shut off 
those permissions as paragraph 4 or 8 acknowledges, which 
brings us to the next point, which is counsel's, you know, 
expression of concern for a comment I made about privacy. 

So let me be very, very clear. Facebook scrupulously 
honors and respects privacy on its platform, but in accordance 
with users' privacy settings. And that's the part they want to 
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1 

elide over. 

2 

Users had the absolute right to control who saw what. And 

3 

to the extent a user made that privacy designation, Facebook 

4 

scrupulously honored it. 

5 

And what's clear from this lengthy Complaint, when you 

6 

look at 408, is that at no time did Facebook take any action in 

7 

excess of those privacy settings, which brings us to the next 

8 

point, which is, counsel ignored, throughout their argument. 

9 

Facebook's specific warning that it cannot control what the 

10 

Kogans of the world do with user -- 

11 

THE COURT: I understand that. 

12 

MR. SNYDER: -- information. 

13 

Counsel said, "What difference does it matter?" 

14 

It matters. 

15 

THE COURT: I understand your argument on that point. 

16 

MR. SNYDER: The final point is -- I don't think you 

17 

need anything on incorporation by reference, unless Your Honor 

18 

wants something there. 

19 

THE COURT: No, no, no. That's okay. I just wanted 

20 

to see if the plaintiffs had any better cases on that. 

21 

MR. SNYDER: And SO in answer -- so counsel's first 

22 

answer to your question, which was "Yes, these other business 

23 

partners are just like all other apps," is the operative 

24 

admission. It is the operative point, because nothing Facebook 

25 

did, as opposed to Cambridge Analytica, exceeded the app 
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settings. 

The final point is -- I guess I'm not going to say 
anything about standing. 

THE COURT: I think that's probably a good choice. 

MR. SNYDER: Unless Your Honor wanted me to. 

But what happened here -- not standing. What happened 
here is exactly what we said could happen, and that's what, 
again, makes counsel's arguments so disingenuous. 

We imposed a curfew on our app developers. 

We told our users: If you share with friends, app 
developers will get your information. 

So we told Kogan: You can't sell the information. 

We told our users: Kogan might get your information if 
you give information to friends. 

And then we told everyone: If you don't like these rules, 
you have so many different ways to protect your privacy. You 
can, of course, leave the system entirely. You can limit who 
sees what and who you share with. You can look at what apps 
and what the app policies are. 

And so this is not the Wild West where the plaintiffs were 
without ample protection and ability to safeguard their privacy 
if they so chose. 

And a number of users. Your Honor, in 2012, up to and 
including today, elected to change their privacy settings to 
make private what they wanted to keep private, and then to lose 
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control of the privacy when that was their decision on this 
social media platform. 

Unless the Court has any other questions, the final thing 
I wanted to say, actually, is, without arguing standing at all, 
because I'm not going to, in the event that the Court rules, as 
the order suggested it might, that it finds standing based on 
some privacy harm, we would just respectfully request that 
the Court make clear which causes of action the Court finds 
standing exists under, because obviously there's -- 

THE COURT: Of course. 

MR. SNYDER: -- a laundry list. 

Because we may ask the Court, after reviewing the order if 
it goes against us on that point, to certify the standing 
question to the Circuit. 

THE COURT : Okay. 

MR. SNYDER : Thank you, Judge. 

THE COURT: You seem like you really want to -- 

MR. LOESER: I just want to ask a question. 

Your Honor. 

THE COURT : Good. 

MR. LOESER: Mr. Snyder has said repeatedly that 
there's nothing in the Complaint in which we allege that 
privacy settings were violated. It's something that you asked 
about last time, too, whether we allege they violated privacy 
settings. 
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Why don't we submit just a document, with no argument, 
just identifying the paragraphs of the Complaint where we 
specifically allege that privacy settings were not complied 
with. Would that be useful? 

THE COURT : Sure. 

MR. LOESER: Okay. Thank you. 

THE COURT: Why don't you do that on Friday also. 

And thank you very much. 

MR. SNYDER : Thank you, Judge. 

MS. LAUFENBERG: Thank you. 

THE CLERK: Court is adjourned. 

(Proceedings adjourned at 1:44 p.m.) 
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